Detections
Analytics

1.176 SOL-11.1-070240

Information

The operating system must reveal error messages only to authorized personnel.

GROUP ID: V-216202RULE ID: SV-216202r958566

Proper file permissions and ownership ensures that only designated personnel in the organization can access error messages.

Solution

The root role is required.

Change the permissions and owner on the /var/adm/messages file:

chmod 640 /var/adm/messageschown root /var/adm/messageschgrp root /var/adm/messages

Change the permissions and owner on the /var/adm directory:

chmod 750 /var/admchown root /var/admchgrp sys /var/adm

See Also

https://workbench.cisecurity.org/benchmarks/23873

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-11b., CAT|III, CCI|CCI-001314, Rule-ID|SV-216202r958566_rule, STIG-ID|SOL-11.1-070240, Vuln-ID|V-216202

Plugin: Unix

Control ID: 0e29af4915c3d34309e56aaf6cf8ffd73be2d1fff76700b713dbf249a8a52d30