Theme

CCI|CCI-001314

Title

The information system reveals error messages only to organization-defined personnel or roles.

Reference Item Details

Reference: CCI - DISA Control Correlation Identifier

Category: 2009

Audit Items

Name	Plugin	Audit Name
4.1.4.1 Ensure Audit logs are owned by root and mode 0600 or less permissive	Unix	CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
AIX7-00-002070 - AIX log files must be owned by a system account - /var/adm	Unix	DISA STIG AIX 7.x v2r6
AIX7-00-002070 - AIX log files must be owned by a system account - /var/log	Unix	DISA STIG AIX 7.x v2r6
AIX7-00-002070 - AIX log files must be owned by a system account - /var/log/syslog	Unix	DISA STIG AIX 7.x v2r6
AIX7-00-002071 - AIX log files must be owned by a system group - /var/adm	Unix	DISA STIG AIX 7.x v2r6
AIX7-00-002071 - AIX log files must be owned by a system group - /var/log	Unix	DISA STIG AIX 7.x v2r6
AIX7-00-002071 - AIX log files must be owned by a system group - /var/log/syslog	Unix	DISA STIG AIX 7.x v2r6
AIX7-00-003006 - AIX log files must have mode 0640 or less permissive - /var/adm	Unix	DISA STIG AIX 7.x v2r6
AIX7-00-003006 - AIX log files must have mode 0640 or less permissive - /var/log	Unix	DISA STIG AIX 7.x v2r6
AIX7-00-003006 - AIX log files must have mode 0640 or less permissive - /var/log/syslog	Unix	DISA STIG AIX 7.x v2r6
AIX7-00-003007 - AIX log files must not have extended ACLs, except as needed to support authorized software.	Unix	DISA STIG AIX 7.x v2r6
AMLS-NM-000250 - The Arista Multilayer Switch must reveal error messages only to authorized individuals (ISSO, ISSM, and SA) - ISSO, ISSM, and SA.	Arista	DISA STIG Arista MLS DCS-7000 Series NDM v1r3
AOSX-13-002105 - The macOS system must be configured with system log files owned by root and group-owned by wheel or admin - asl	Unix	DISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-002105 - The macOS system must be configured with system log files owned by root and group-owned by wheel or admin - newsyslog	Unix	DISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-002106 - The macOS system must be configured with system log files set to mode 640 or less permissive - asl	Unix	DISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-002106 - The macOS system must be configured with system log files set to mode 640 or less permissive - newsyslog	Unix	DISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-002107 - The macOS system must be configured with access control lists (ACLs) for system log files to be set correctly - asl	Unix	DISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-002107 - The macOS system must be configured with access control lists (ACLs) for system log files to be set correctly - newsyslog	Unix	DISA STIG Apple Mac OSX 10.13 v2r5
AOSX-14-000030 - The macOS system must be configured so that log files must not contain access control lists (ACLs).	Unix	DISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-004001 - The macOS system must be configured with system log files owned by root and group-owned by wheel or admin - ASL	Unix	DISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-004001 - The macOS system must be configured with system log files owned by root and group-owned by wheel or admin - Newsyslog	Unix	DISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-004002 - The macOS system must be configured with system log files set to mode 640 or less permissive - ASL	Unix	DISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-004002 - The macOS system must be configured with system log files set to mode 640 or less permissive - Newsyslog	Unix	DISA STIG Apple Mac OSX 10.14 v2r6
AOSX-15-000030 - The macOS system must be configured so that log files must not contain access control lists (ACLs).	Unix	DISA STIG Apple Mac OSX 10.15 v1r8
AOSX-15-004001 - The macOS system must be configured with system log files owned by root and group-owned by wheel or admin - ASL	Unix	DISA STIG Apple Mac OSX 10.15 v1r8
AOSX-15-004001 - The macOS system must be configured with system log files owned by root and group-owned by wheel or admin - Newsyslog	Unix	DISA STIG Apple Mac OSX 10.15 v1r8
AOSX-15-004002 - The macOS system must be configured with system log files set to mode 640 or less permissive - ASL	Unix	DISA STIG Apple Mac OSX 10.15 v1r8
AOSX-15-004002 - The macOS system must be configured with system log files set to mode 640 or less permissive - Newsyslog	Unix	DISA STIG Apple Mac OSX 10.15 v1r8
APPL-11-000030 - The macOS system must be configured so that log files must not contain access control lists (ACLs).	Unix	DISA STIG Apple macOS 11 v1r6
APPL-11-000030 - The macOS system must be configured so that log files must not contain access control lists (ACLs).	Unix	DISA STIG Apple macOS 11 v1r5
APPL-11-004001 - The macOS system must be configured with system log files owned by root and group-owned by wheel or admin - asl	Unix	DISA STIG Apple macOS 11 v1r5
APPL-11-004001 - The macOS system must be configured with system log files owned by root and group-owned by wheel or admin - asl	Unix	DISA STIG Apple macOS 11 v1r6
APPL-11-004001 - The macOS system must be configured with system log files owned by root and group-owned by wheel or admin - newsyslog	Unix	DISA STIG Apple macOS 11 v1r6
APPL-11-004001 - The macOS system must be configured with system log files owned by root and group-owned by wheel or admin - newsyslog	Unix	DISA STIG Apple macOS 11 v1r5
APPL-11-004002 - The macOS system must be configured with system log files set to mode 640 or less permissive - asl	Unix	DISA STIG Apple macOS 11 v1r6
APPL-11-004002 - The macOS system must be configured with system log files set to mode 640 or less permissive - asl	Unix	DISA STIG Apple macOS 11 v1r5
APPL-11-004002 - The macOS system must be configured with system log files set to mode 640 or less permissive - newsyslog	Unix	DISA STIG Apple macOS 11 v1r6
APPL-11-004002 - The macOS system must be configured with system log files set to mode 640 or less permissive - newsyslog	Unix	DISA STIG Apple macOS 11 v1r5
APPL-12-000030 - The macOS system must be configured so that log files must not contain access control lists (ACLs).	Unix	DISA STIG Apple macOS 12 v1r4
APPL-12-004001 - The macOS system must be configured with system log files owned by root and group-owned by wheel or admin - asl	Unix	DISA STIG Apple macOS 12 v1r4
APPL-12-004001 - The macOS system must be configured with system log files owned by root and group-owned by wheel or admin - newsyslog	Unix	DISA STIG Apple macOS 12 v1r4
APPL-12-004002 - The macOS system must be configured with system log files set to mode 640 or less permissive - asl	Unix	DISA STIG Apple macOS 12 v1r4
APPL-12-004002 - The macOS system must be configured with system log files set to mode 640 or less permissive - newsyslog	Unix	DISA STIG Apple macOS 12 v1r4
Big Sur - Configure Apple System Log Files Owned by Root and Group to Wheel	Unix	NIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Configure Apple System Log Files Owned by Root and Group to Wheel	Unix	NIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Configure Apple System Log Files Owned by Root and Group to Wheel	Unix	NIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Configure Apple System Log Files To Mode 640 or Less Permissive	Unix	NIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Configure Apple System Log Files To Mode 640 or Less Permissive	Unix	NIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Configure Apple System Log Files To Mode 640 or Less Permissive	Unix	NIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Configure Audit Log Files to Not Contain Access Control Lists	Unix	NIST macOS Big Sur v1.4.0 - 800-53r4 Low