UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Sendmail logging must not be set to less than nine in the sendmail.cf file.


Overview

Finding ID Version Rule ID IA Controls Severity
V-240439 VRAU-SL-000590 SV-240439r671058_rule Medium
Description
If Sendmail is not configured to log at level 9, system logs may not contain the information necessary for tracking unauthorized use of the sendmail service.
STIG Date
VMware vRealize Automation 7.x SLES Security Technical Implementation Guide 2021-06-24

Details

Check Text ( C-43672r671056_chk )
Check sendmail to determine if the logging level is set to level nine:

# grep "O L" /etc/sendmail.cf
OR
# grep LogLevel /etc/sendmail.cf

If logging is set to less than nine, this is a finding.
Fix Text (F-43631r671057_fix)
Edit the sendmail.cf file, locate the "O L" or "LogLevel" entry and change it to "9".