GEN004480 - The SMTP service log file must be owned by root - /var/adm/messages

Information

If the SMTP service log file is not owned by root, then unauthorized personnel may modify or delete the file to hide a system compromise.

Solution

Change the ownership of the Sendmail log file.
# chown root <sendmail log file>

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3(4), CAT|II, CCI|CCI-002165, Rule-ID|SV-226938r854437_rule, STIG-ID|GEN004480, STIG-Legacy|SV-837, STIG-Legacy|V-837, Vuln-ID|V-226938

Plugin: Unix

Control ID: 58b525a2493614a41fd40d5b9f8e24ac964887428d5a3f79e81c32b1a5010812