Sendmail logging must not be set to less than nine in the sendmail.cf file.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-239533 | VROM-SL-000570 | SV-239533r662050_rule | Medium |
| Description |
|---|
| If Sendmail is not configured to log at level 9, system logs may not contain the information necessary for tracking unauthorized use of the sendmail service. |
| STIG | Date |
|---|---|
| VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide | 2021-07-01 |
Details
| Check Text ( C-42766r662048_chk ) |
|---|
| Check sendmail to determine if the logging level is set to level "9": # grep "O L" /etc/sendmail.cf OR # grep LogLevel /etc/sendmail.cf If logging is set to less than "9", this is a finding. |
| Fix Text (F-42725r662049_fix) |
|---|
| Edit the "sendmail.cf" file, locate the "O L" or "LogLevel" entry, and change it to "9". |