STIGQter STIGQter: STIG Summary: Solaris 10 X86 Security Technical Implementation Guide Version: 1 Release: 26 Benchmark Date: 24 Jan 2020: System log files must not have extended ACLs, except as needed to support authorized software.

DISA Rule

SV-26369r1_rule

Vulnerability Number

V-22315

Group Title

GEN001270

Rule Version

GEN001270

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Remove the extended ACL from the file.
# chmod A- [file with extended ACL]

Check Contents

Verify all system log files have no extended ACLs.

Procedure:
# ls -lL /var/adm
If the permissions include a "+", the file has an extended ACL. If an extended ACL exists, verify with the SA if the ACL is required to support authorized software and provides the minimum necessary permissions. If an extended ACL exists that provides access beyond the needs of authorized software, this is a finding.

Vulnerability Number

V-22315

Documentable

True

Rule Version

GEN001270

Severity Override Guidance

Verify all system log files have no extended ACLs.

Procedure:
# ls -lL /var/adm
If the permissions include a "+", the file has an extended ACL. If an extended ACL exists, verify with the SA if the ACL is required to support authorized software and provides the minimum necessary permissions. If an extended ACL exists that provides access beyond the needs of authorized software, this is a finding.

Check Content Reference

M

Responsibility

System Administrator

Target Key

25

Comments