AIX sendmail logging must not be set to less than nine in the sendmail.cf file.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-215344	AIX7-00-003038	SV-215344r991589_rule		Medium

Description

If Sendmail is not configured to log at level 9, system logs may not contain the information necessary for tracking unauthorized use of the sendmail service.

STIG	Date
IBM AIX 7.x Security Technical Implementation Guide	2024-08-16

Details

Check Text (C-16542r294483_chk)

Check if "Sendmail" logging is set to level "9" by running command:

# grep "^O LogLevel" /etc/mail/sendmail.cf
O LogLevel=9

If logging is set to less than "9", this is a finding.

Fix Text (F-16540r294484_fix)

Edit /etc/mail/sendmail.cf file, locate the "O LogLevel" line, or add a new line if necessary, and change the log level to "9". The new LogLevel line should be:
O LogLevel=9