Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-240442 | VRAU-SL-000605 | SV-240442r671067_rule | Medium |
Description |
---|
If the SMTP service log file is more permissive than 0644, unauthorized users may be allowed to change the log file. |
STIG | Date |
---|---|
VMware vRealize Automation 7.x SLES Security Technical Implementation Guide | 2023-09-22 |
Check Text ( C-43675r671065_chk ) |
---|
Check the permissions on the mail log files: # ls -la /var/log/mail # ls -la /var/log/mail.info # ls -la /var/log/mail.warn # ls -la /var/log/mail.err If the log file permissions are greater than "0644", this is a finding. |
Fix Text (F-43634r671066_fix) |
---|
Change the mode of the sendmail log files: # chmod 0644 |