GEN004500 - The SMTP service log file must have mode 0644 or less permissive.

Information

If the SMTP service log file is more permissive than 0644, unauthorized users may be allowed to change the log file.

Solution

Change the mode of the SMTP service log file.

Procedure:
# chmod 0644 <sendmail log file>

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Audit Name: DISA STIG AIX 6.1 v1r14

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-838, Rule-ID|SV-838r2_rule, STIG-ID|GEN004500, Vuln-ID|V-838

Plugin: Unix

Control ID: 0380ce11ab8ceb0a7d5d387307d75f709babaace82535c3119734d7b27a533f6