Check: GEN002680
SOLARIS 9 SPARC STIG:
GEN002680
(in version v1 r12)
Title
System audit logs must be owned by root. (Cat II impact)
Discussion
Failure to give ownership of system audit log files to root provides the designated owner and unauthorized users with the potential to access sensitive information.
Check Content
Fix Text
Change the ownership of the audit log file(s). Procedure: # chown root <audit log file>
Additional Identifiers
Rule ID: SV-27271r1_rule
Vulnerability ID: V-812
Group Title: GEN002680
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000162 |
Protect audit information from unauthorized access. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| AU-9 |
Protection of Audit Information |