Other Articles

Servers – Ensure Permissions on All Logfiles are Configured

Support > Fixing Checks > Server

06 March, 2026

This check ensures that permissions on all log files are properly configured to prevent unauthorized access.

Improper permissions on log files can expose sensitive system information and allow unauthorized users to modify or delete critical logs.

Check Details

  • Resource: Server
  • Check: Ensure permissions on all log files are securely configured
  • Risk: Weak permissions may expose sensitive logs and allow unauthorized modification or deletion of log data.

Remediation Steps

  1. Open a terminal session with root or sudo privileges.

  2. Audit existing log file permissions:

    find /var/log -type f -ls

  3. Verify that:

    • Others have no permissions on log files
    • Group does not have write or execute permissions

  4. Apply secure permissions to all log files and directories:

    find /var/log -type f -exec chmod g-wx,o-rwx "{}" + -o -type d -exec chmod g-w,o-rwx "{}" +
  5. Ensure permissions are correctly applied across all log files.
  6. Re-run the audit command to confirm compliance.
  7. Perform periodic checks to maintain secure log file permissions.