GEN004480 - The SMTP service log file must be owned by root - /var/log/syslog

Information

If the SMTP service log file is not owned by root, then unauthorized personnel may modify or delete the file to hide a system compromise.

Solution

Change the ownership of the Sendmail log file.
# chown root <sendmail log file>

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3(4), CAT|II, CCI|CCI-002165, Rule-ID|SV-227845r854504_rule, STIG-ID|GEN004480, STIG-Legacy|SV-837, STIG-Legacy|V-837, Vuln-ID|V-227845

Plugin: Unix

Control ID: 3dfe61b3ec580d9311fc37ea9b1c3b4d4750674d8e0b33cc836aca1b616ee2ee