Description: Log files stored in /var/log/ contain logged information from many services on the system, or on log hosts others as well. Rationale: It is important to ensure that log files have the correct permissions to ensure that sensitive data is archived and protected. Audit: Run the following command and verify that other has no permissions on any files and group does not have write or execute permissions on any files: # find /var/log -type f -perm /037 -ls -o -type d -perm /026 -ls No output should be returned Remediation: Run the following commands to set permissions on all existing log files: find /var/log -type f -exec chmod g-wx,o-rwx "{}" + -o -type d -exec chmod g-w,o-rwx "{}" + Notes: You may also need to change the configuration for your logging software or services for any logs that had incorrect permissions.

[111100000]

Run the following commands to set permissions on all existing log files: find /var/log -type f -exec chmod g-wx,o-rwx "{}" + -o -type d -exec chmod g-w,o-rwx "{}" +