STIGQter: STIG Summary: Solaris 10 X86 Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

Sendmail logging must not be set to less than nine in the sendmail.cf file.

DISA Rule

SV-227843r603266_rule

Vulnerability Number

V-227843

Group Title

SRG-OS-000480

Rule Version

GEN004440

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Edit the sendmail.conf file, locate the "O L" or LogLevel entry and change it to 9.

Check Contents

Check if Sendmail logging is set to level 9.

Procedure:
# grep "O L" /etc/mail/sendmail.cf

OR

# grep LogLevel /etc/mail/sendmail.cf

If logging is set to less than 9, this is a finding.

Vulnerability Number

V-227843

Documentable

False

Rule Version

GEN004440

Severity Override Guidance

Check if Sendmail logging is set to level 9.

Procedure:
# grep "O L" /etc/mail/sendmail.cf

OR

# grep LogLevel /etc/mail/sendmail.cf

If logging is set to less than 9, this is a finding.

Check Content Reference

M

Target Key

4061

Comments