Check: GEN002680
VMware ESX 3 Server:
GEN002680
(in version v1 r2)
Title
System audit logs must be owned by root. (Cat II impact)
Discussion
Failure to give ownership of system audit log files to root provides the designated owner and unauthorized users with the potential to access sensitive information.
Check Content
Check the ownership of the audit log file(s). # ls -l <audit log file> If any audit log file is not owned by root, this is a finding.
Fix Text
Change the ownership of the audit log file(s). Procedure: # chown root <audit log file>
Additional Identifiers
Rule ID: SV-812r2_rule
Vulnerability ID: V-812
Group Title: GEN002680
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000162 |
The information system protects audit information from unauthorized access. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| AU-9 |
Protection Of Audit Information |