GEN005395 - The /etc/syslog.conf file must not have an extended ACL.

Information

Unauthorized users must not be allowed to access or modify the /etc/syslog.conf file.

Solution

Remove the extended ACL from the file.
# chmod A- /etc/syslog.conf

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip

Item Details

Audit Name: DISA STIG Solaris 10 SPARC v2r4

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-226979r603265_rule, STIG-ID|GEN005395, STIG-Legacy|SV-26743, STIG-Legacy|V-22454, Vuln-ID|V-226979

Plugin: Unix

Control ID: 7f222ce69dbf74b64987465f5625909b6107deead96c98bd892ae226cb43359d