UCF STIG Viewer Logo

The Photon operating system /var/log directory must be owned by root.


Overview

Finding ID Version Rule ID IA Controls Severity
V-239113 PHTN-67-000041 SV-239113r675147_rule Medium
Description
Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state and can provide sensitive information to an unprivileged attacker.
STIG Date
VMware vSphere 6.7 Photon OS Security Technical Implementation Guide 2022-06-17

Details

Check Text ( C-42324r675145_chk )
At the command line, execute the following command:

# stat -c "%n is owned by %U and group owned by %G" /var/log

If the /var/log is not owned by root, this is a finding.
Fix Text (F-42283r675146_fix)
At the command line, execute the following command:

# chown root:root /var/log