Detections
Analytics

1.178 SOL-11.1-070240

Information

The operating system must reveal error messages only to authorized personnel.

GROUP ID: V-216439
RULE ID: SV-216439r958566

Proper file permissions and ownership ensures that only designated personnel in the organization can access error messages.

Solution

The root role is required.

Change the permissions and owner on the /var/adm/messages file:

# chmod 640 /var/adm/messages
# chown root /var/adm/messages
# chgrp root /var/adm/messages

Change the permissions and owner on the /var/adm directory:

# chmod 750 /var/adm
# chown root /var/adm
# chgrp sys /var/adm

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-11b., CAT|III, CCI|CCI-001314, Rule-ID|SV-216439r958566_rule, STIG-ID|SOL-11.1-070240, Vuln-ID|V-216439

Plugin: Unix

Control ID: 932b648b500388d4731f80f337844663f3e725d2527615c28a1855d6eeadc6fd