Skip to content

Verify Group Who Owns the system journal

An XCCDF Rule

Description

To properly set the group owner of /var/log/journal/.*/system.journal, run the command:

$ sudo chgrp systemd-journal /var/log/journal/.*/system.journal

Rationale

RHCOS must protect system journal file from any type of unauthorized access by setting file group ownership.

ID
xccdf_org.ssgproject.content_rule_file_groupowner_system_journal
Severity
Medium
References
Updated