The operating system must reveal error messages only to authorized personnel.
An XCCDF Rule
Description
<VulnDiscussion>Proper file permissions and ownership ensures that only designated personnel in the organization can access error messages.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-216202r958566_rule
- Severity
- Low
- References
- Updated
Remediation - Manual Procedure
The root role is required.
Change the permissions and owner on the /var/adm/messages file:
# chmod 640 /var/adm/messages
# chown root /var/adm/messages