← Back to VMware vRealize Automation 7.x SLES Security Technical Implementation Guide

V-240441

CAT II (Medium)

The SMTP service log files must be owned by root.

Rule ID

SV-240441r671064_rule

STIG

VMware vRealize Automation 7.x SLES Security Technical Implementation Guide

Version

V2R2

CCIs

CCI-000382

Discussion

If the SMTP service log file is not owned by root, then unauthorized personnel may modify or delete the file to hide a system compromise.

Check Content

Check the permissions on the mail log files:

# ls -la /var/log/mail
# ls -la /var/log/mail.info
# ls -la /var/log/mail.warn
# ls -la /var/log/mail.err

If any mail log file is not owned by "root", this is a finding.

Fix Text

Change the ownership of the sendmail log files:

# chown root <sendmail log file>