UCF STIG Viewer Logo

The Photon operating system messages file must have mode 0640 or less permissive.


Overview

Finding ID Version Rule ID IA Controls Severity
V-239115 PHTN-67-000043 SV-239115r675153_rule Medium
Description
Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state and can provide sensitive information to an unprivileged attacker.
STIG Date
VMware vSphere 6.7 Photon OS Security Technical Implementation Guide 2022-06-17

Details

Check Text ( C-42326r675151_chk )
At the command line, execute the following command:

# stat -c "%n permissions are %a" /var/log/vmware/messages

If the permissions on the file are more permissive than 0640, this is a finding.
Fix Text (F-42285r675152_fix)
At the command line, execute the following command:

# chmod 0640 /var/log/vmware/messages