UCF STIG Viewer Logo

The SMTP service log files must be owned by root.


Overview

Finding ID Version Rule ID IA Controls Severity
V-240441 VRAU-SL-000600 SV-240441r671064_rule Medium
Description
If the SMTP service log file is not owned by root, then unauthorized personnel may modify or delete the file to hide a system compromise.
STIG Date
VMware vRealize Automation 7.x SLES Security Technical Implementation Guide 2021-06-24

Details

Check Text ( C-43674r671062_chk )
Check the permissions on the mail log files:

# ls -la /var/log/mail
# ls -la /var/log/mail.info
# ls -la /var/log/mail.warn
# ls -la /var/log/mail.err

If any mail log file is not owned by "root", this is a finding.
Fix Text (F-43633r671063_fix)
Change the ownership of the sendmail log files:

# chown root