STIGQter: STIG Summary: Solaris 10 X86 Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

System log files must not have extended ACLs, except as needed to support authorized software.

DISA Rule

SV-227620r603266_rule

Vulnerability Number

V-227620

Group Title

SRG-OS-000206

Rule Version

GEN001270

Severity

CAT II

CCI(s)

• CCI-001314 - The information system reveals error messages only to organization-defined personnel or roles.

Weight

10

Fix Recommendation

Remove the extended ACL from the file.
# chmod A- [file with extended ACL]

Check Contents

Verify all system log files have no extended ACLs.

Procedure:
# ls -lL /var/adm
If the permissions include a "+", the file has an extended ACL. If an extended ACL exists, verify with the SA if the ACL is required to support authorized software and provides the minimum necessary permissions. If an extended ACL exists that provides access beyond the needs of authorized software, this is a finding.

Vulnerability Number

V-227620

Documentable

False

Rule Version

GEN001270

Severity Override Guidance

Verify all system log files have no extended ACLs.

Procedure:
# ls -lL /var/adm
If the permissions include a "+", the file has an extended ACL. If an extended ACL exists, verify with the SA if the ACL is required to support authorized software and provides the minimum necessary permissions. If an extended ACL exists that provides access beyond the needs of authorized software, this is a finding.

Check Content Reference

M

Target Key

4061

Comments