mediumfilesystemverified ✓✓rollback-safe
Set permissions on /var/log/messages
var-log-messages-permissions · RHEL ≥ 8 · 1 impl
Description
The /var/log/messages file must have mode 0640 or less permissive and be owned by root with group root.
Rationale
System log files contain security-relevant information. Unauthorized access could reveal attack vectors or allow log tampering.
Check → Remediate
Checkfile_permission
- path:
- /var/log/messages
- owner:
- root
- group:
- root
- mode:
- 0640
Remediatefile_permissions
- path:
- /var/log/messages
- owner:
- root
- group:
- root
- mode:
- 0640
Framework references
STIG
V-230245V-230246V-230247V-281035 / RHEL-10-400090V-281036V-281062V-257886 / RHEL-09-232030V-257916V-257917
NIST 800-53
AU-9AC-6
Live verification
rhel10:fullrhel8:checkrhel9:check
#file-permissions#logging#security