IBM AIX 7.x Security Technical Implementation Guide

The IBM AIX 7.x Security Technical Implementation Guide (V3 R4) has 282 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

282STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R4

CurrentPublished Wed Sep 30 2026

The AIX /etc/syslog.conf file must have a mode of 0640 or less permissive.

IBM AIX 7.x Security Technical Implementation Guide

Assessment Title

Rule Text

The AIX /etc/syslog.conf file must have a mode of 0640 or less permissive.

Description

Discussion Text

Unauthorized permissions of the /etc/syslog.conf file can lead to the ability for a malicious actor to alter or disrupt system logging activities. This can aid the malicious actor in avoiding detection and further their ability to conduct malicious activities on the system.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-245563

Rule

SV-245563r1268251_rule

Severity

medium

Rule Version

AIX7-00-002146

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check the mode of /etc/syslog.conf using command:
# ls -al /etc/syslog.conf

The above command should yield the following output:
-rw-r----- 1 root system 993 Mar 11 07:04 /etc/syslog.conf

If the file has a mode more permissive than "0640", this is a finding.

Implementation Procedure

Fix Text

Change the mode of the file to 0640 using command: 
# chmod 0640 /etc/syslog.conf

STIG check 276 of 282 in the IBM AIX 7.x STIG checklist

← Previous · V-245562The AIX /etc/syslog.conf file must be group-owned by system.Next · V-245564 →The inetd.conf file on AIX must be group owned by the "system" group.