RHEL-06-000383 - Audit log files must have mode 0640 or less permissive.

Information

If users can write to audit logs, audit trails can be modified or destroyed.

Solution

Change the mode of the audit log files with the following command:

# chmod 0640 [audit_file]

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_6_V2R2_STIG.zip

Item Details

Audit Name: DISA Red Hat Enterprise Linux 6 STIG v2r2

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-9, CAT|II, CCI|CCI-000163, Rule-ID|SV-218084r603264_rule, STIG-ID|RHEL-06-000383, STIG-Legacy|SV-50299, STIG-Legacy|V-38498, Vuln-ID|V-218084

Plugin: Unix

Control ID: c8531e204e35b23fd1483f067b5d29abaf9ed6fa951302e5ff31018ec360d1fe