GEN004480 - The SMTP service log file must be owned by root.

Information

If the SMTP service log file is not owned by root, then unauthorized personnel may modify or delete the file to hide a system compromise.

Solution

Change the ownership of the Sendmail log file.
# chown root <sendmail log file>

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Audit Name: DISA AIX 5.3 STIG v1r2

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CAT|II, CCI|CCI-000225, CSCv6|3.1, Rule-ID|SV-837r2_rule, STIG-ID|GEN004480, Vuln-ID|V-837

Plugin: Unix

Control ID: b4b73255a38cd3457034a1b8ffd2d363e3d12a0132b8022bcbbc2d7a4dcad254