Sendmail logging must not be set to less than nine in the sendmail.cf file.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-240439 | VRAU-SL-000590 | SV-240439r671058_rule | Medium |
| Description |
|---|
| If Sendmail is not configured to log at level 9, system logs may not contain the information necessary for tracking unauthorized use of the sendmail service. |
| STIG | Date |
|---|---|
| VMware vRealize Automation 7.x SLES Security Technical Implementation Guide | 2021-06-24 |
Details
| Check Text ( C-43672r671056_chk ) |
|---|
| Check sendmail to determine if the logging level is set to level nine: # grep "O L" /etc/sendmail.cf OR # grep LogLevel /etc/sendmail.cf If logging is set to less than nine, this is a finding. |
| Fix Text (F-43631r671057_fix) |
|---|
| Edit the sendmail.cf file, locate the "O L" or "LogLevel" entry and change it to "9". |