GEN005395 - The /etc/syslog.conf file must not have an extended ACL.

Information

Unauthorized users must not be allowed to access or modify the /etc/syslog.conf file.

Solution

Remove the extended ACL from the syslog.conf file and change extended attributes to disabled.
#acledit /etc/syslog.conf

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Audit Name: DISA AIX 5.3 STIG v1r2

Category: ACCESS CONTROL

References: 800-53|AC-3(4), CAT|II, CCI|CCI-000225, Rule-ID|SV-38820r1_rule, STIG-ID|GEN005395, Vuln-ID|V-22454

Plugin: Unix

Control ID: 630b1e9f4e48e0f858f4b900a435336d96206788acdb41ad530367b943ad9759