mediumfilesystemverified ✓rollback-safe
Set permissions on /var/log directory
var-log-dir-permissions · RHEL ≥ 8 · 1 impl
Description
The /var/log directory must have mode 0755 or less permissive and be owned by root with group root.
Rationale
The /var/log directory stores system and application logs. Improper permissions could allow unauthorized access to or modification of log data.
Check → Remediate
Checkfile_permission
- path:
- /var/log
- owner:
- root
- group:
- root
- mode:
- 0755
Remediatefile_permissions
- path:
- /var/log
- owner:
- root
- group:
- root
- mode:
- 0755
Framework references
STIG
V-230248V-230249V-230250V-257885V-257914V-257915V-281033V-281034V-281061
NIST 800-53
AU-9AC-6
Live verification
rhel10:checkrhel8:checkrhel9:check
#file-permissions#logging#security