UCF STIG Viewer Logo

The Photon operating system messages file must be owned by root.


Overview

Finding ID Version Rule ID IA Controls Severity
V-239114 PHTN-67-000042 SV-239114r675150_rule Medium
Description
Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state and can provide sensitive information to an unprivileged attacker.
STIG Date
VMware vSphere 6.7 Photon OS Security Technical Implementation Guide 2022-06-17

Details

Check Text ( C-42325r675148_chk )
At the command line, execute the following command:

# stat -c "%n is owned by %U and group owned by %G" /var/log/vmware/messages

If /var/log/vmware/messages is not owned by root or not group owned by root, this is a finding.
Fix Text (F-42284r675149_fix)
At the command line, execute the following command:

# chown root:root /var/log/vmware/messages