mediumfilesystemverified ✓rollback-safe
Restrict ownership of the /var/log directory
var-log-dir-owner · UBUNTU ≥ 22 · 1 impl
Description
The /var/log directory must be owned by root so that only root can manage the contents of the system log directory.
Rationale
Correct ownership of /var/log prevents unauthorized users from manipulating the log directory and the records it holds, preserving the integrity of the audit trail.
Check → Remediate
Checkfile_permission
- path:
- /var/log
- owner:
- root
Remediatefile_permissions
- path:
- /var/log
- owner:
- root
Framework references
STIG
V-270766 / UBTU-24-700110V-260508 / UBTU-22-232120
NIST 800-53
SI-11
Live verification
ubuntu22:checkubuntu24:checkubuntu26:check
#file-permissions#logging#security