The SMTP service log files must be owned by root.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-88541	VROM-SL-000580	SV-99191r1_rule		Medium

Description
If the SMTP service log file is not owned by root, then unauthorized personnel may modify or delete the file to hide a system compromise.

STIG	Date
VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide	2018-10-11

Details

Check Text ( C-88233r1_chk )
Check the permissions on the mail log files: # ls -la /var/log/mail # ls -la /var/log/mail.info # ls -la /var/log/mail.warn # ls -la /var/log/mail.err If any mail log file is not owned by "root", this is a finding.

Fix Text (F-95283r1_fix)
Change the ownership of the sendmail log files to "root": # chown root