STIGQter: STIG Summary: Solaris 10 SPARC Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

Sendmail logging must not be set to less than nine in the sendmail.cf file.

DISA Rule

SV-226936r603265_rule

Vulnerability Number

V-226936

Group Title

SRG-OS-000480

Rule Version

GEN004440

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Edit the sendmail.conf file, locate the "O L" or LogLevel entry and change it to 9.

Check Contents

Check if Sendmail logging is set to level 9.

Procedure:
# grep "O L" /etc/mail/sendmail.cf

OR

# grep LogLevel /etc/mail/sendmail.cf

If logging is set to less than 9, this is a finding.

Vulnerability Number

V-226936

Documentable

False

Rule Version

GEN004440

Severity Override Guidance

Check if Sendmail logging is set to level 9.

Procedure:
# grep "O L" /etc/mail/sendmail.cf

OR

# grep LogLevel /etc/mail/sendmail.cf

If logging is set to less than 9, this is a finding.

Check Content Reference

M

Target Key

4060

Comments