Adjust permissions on file_permissions_var_log_messages to 0600

ComplianceAsCode · Dec 17, 2024 · a06c809 · a06c809
1 parent 5a5d244
commit a06c809
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/...stem/permissions/files/permissions_var_log_dir/file_permissions_var_log_messages/rule.yml b/...stem/permissions/files/permissions_var_log_dir/file_permissions_var_log_messages/rule.yml
@@ -3,7 +3,7 @@ documentation_complete: true
 title: 'Verify Permissions on /var/log/messages File'
 
 description: |-
-    {{{ describe_file_permissions(file="/var/log/messages", perms="0640") }}}
+    {{{ describe_file_permissions(file="/var/log/messages", perms="0600") }}}
 
 rationale: |-
     The <tt>/var/log/messages</tt> file contains logs of error messages in
@@ -22,18 +22,18 @@ references:
     stigid@ol8: OL08-00-010210
     stigid@rhel8: RHEL-08-010210
 
-ocil_clause: '{{{ ocil_clause_file_permissions(file="/var/log/messages", perms="-rw-r-----") }}}'
+ocil_clause: '{{{ ocil_clause_file_permissions(file="/var/log/messages", perms="-rw-------") }}}'
 
 ocil: |-
-    {{{ ocil_file_permissions(file="/var/log/messages", perms="-rw-r-----") }}}
+    {{{ ocil_file_permissions(file="/var/log/messages", perms="-rw-------") }}}
 
 template:
     name: file_permissions
     vars:
         filepath: /var/log/messages
-        filemode: '0640'
+        filemode: '0600'
 
 fixtext: |-
     {{{ fixtext_file_permissions("/var/log/messages", "0640") | indent(4) }}}
 
-srg_requirement: '{{{ srg_requirement_file_permission("/var/log/messages", "0640") }}}'
+srg_requirement: '{{{ srg_requirement_file_permission("/var/log/messages", "0600") }}}'