Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-89661 | VRAU-SL-000605 | SV-100311r1_rule | Medium |
Description |
---|
If the SMTP service log file is more permissive than 0644, unauthorized users may be allowed to change the log file. |
STIG | Date |
---|---|
VMware vRealize Automation 7.x SLES Security Technical Implementation Guide | 2018-10-12 |
Check Text ( C-89353r1_chk ) |
---|
Check the permissions on the mail log files: # ls -la /var/log/mail # ls -la /var/log/mail.info # ls -la /var/log/mail.warn # ls -la /var/log/mail.err If the log file permissions are greater than "0644", this is a finding. |
Fix Text (F-96403r1_fix) |
---|
Change the mode of the sendmail log files: # chmod 0644 |