The SMTP service log files must be owned by root.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-239535	VROM-SL-000580	SV-239535r662056_rule		Medium

Description
If the SMTP service log file is not owned by root, then unauthorized personnel may modify or delete the file to hide a system compromise.

STIG	Date
VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide	2021-07-01

Details

Check Text ( C-42768r662054_chk )
Check the permissions on the mail log files: # ls -la /var/log/mail # ls -la /var/log/mail.info # ls -la /var/log/mail.warn # ls -la /var/log/mail.err If any mail log file is not owned by "root", this is a finding.

Fix Text (F-42727r662055_fix)
Change the ownership of the sendmail log files to "root": # chown root