← Rules Catalog
mediumfilesystemverified rollback-safe

Restrict group ownership of the /var/log directory

var-log-dir-group · UBUNTU ≥ 22 · 1 impl

Description

The /var/log directory must be group-owned by syslog so that only the logging service and authorized administrators can manage the system log directory.

Rationale

Correct group ownership of /var/log limits access to the log directory to the logging service, preventing unprivileged users from reading or altering log records.

Check → Remediate

Checkfile_permission
path:
/var/log
group:
syslog
Remediatefile_permissions
path:
/var/log
group:
syslog

Framework references

STIG

V-270765 / UBTU-24-700100V-260509 / UBTU-22-232125

NIST 800-53

SI-11

Live verification

ubuntu22:checkubuntu24:checkubuntu26:check
#file-permissions#logging#security