The Photon operating system must reveal error messages only to authorized users.
An XCCDF Rule
Description
Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an organization's operational state or can identify the operating system or platform. Additionally, Personally Identifiable Information (PII) and operational information must not be revealed through error messages to unauthorized personnel or their designated representatives.
- ID
- SV-258832r958566_rule
- Version
- PHTN-40-000074
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Navigate to and open:
/etc/rsyslog.conf
Add or update the following line: