Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-88543 | VROM-SL-000585 | SV-99193r1_rule | Medium |
Description |
---|
If the SMTP service log file is more permissive than 0644, unauthorized users may be allowed to change the log file. |
STIG | Date |
---|---|
VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide | 2018-10-11 |
Check Text ( C-88235r1_chk ) |
---|
Check the permissions on the mail log files: # ls -la /var/log/mail # ls -la /var/log/mail.info # ls -la /var/log/mail.warn # ls -la /var/log/mail.err If the log file permissions are greater than "0644", this is a finding. |
Fix Text (F-95285r1_fix) |
---|
Change the mode of the sendmail log files to "0644": # chmod 0644 |