Skip to content

Conversation

@apenav
Copy link

@apenav apenav commented Mar 30, 2021

No description provided.

@bcwilhite
Copy link
Contributor

Hi @apenav, Thank you for your interest in the ATO-Toolkit. Reviewing the information, you mentioned the find command has a typo, however, the DISA STIG explicitly states that the "or" form of the find perm parameter to be used in order to set any file with 1, 3 or 7 within the /var/log directory to mode 640.

Copy link
Contributor

@bcwilhite bcwilhite left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Need clarification on why this is a typo, DISA explicitly states this command in the fix text section of the Ubuntu STIG.

Fix Text: Configured the Ubuntu operating system to set permissions of all log files under /var/log directory to 640 or more restricted, by using the following command:

# sudo find /var/log -perm /137 -type f -exec chmod 640 '{}' ;

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants