mediumfilesystemverified ✓rollback-safe
Restrict group ownership of the /var/log directory
var-log-dir-group · UBUNTU ≥ 22 · 1 impl
Description
The /var/log directory must be group-owned by syslog so that only the logging service and authorized administrators can manage the system log directory.
Rationale
Correct group ownership of /var/log limits access to the log directory to the logging service, preventing unprivileged users from reading or altering log records.
Check → Remediate
Checkfile_permission
- path:
- /var/log
- group:
- syslog
Remediatefile_permissions
- path:
- /var/log
- group:
- syslog
Framework references
STIG
V-270765 / UBTU-24-700100V-260509 / UBTU-22-232125
NIST 800-53
SI-11
Live verification
ubuntu22:checkubuntu24:checkubuntu26:check
#file-permissions#logging#security