setting /var/adm/messages permission 1

[cjoaquincruz]

I am trying to "harden" a Solaris 8 node. One of the guidelines is to chmod 600 the /var/adm/messages file (see the Solaris Security Guide -- sabernet.home.comcast.net/papers/Solaris.html). The problem is that Solaris by default creates this file with 644 permitions. Even if you change it, the system will eventually move the file to messages.0 and create a new messages file with 644 permissions. Is there a way to change this so that syslogd or whatever process is doing this will create a messages file with 600 permissions? I can find nothing on the web on this. Thanks in advance,
Joaquin

 

[vptl]

Write a script in rc1.d to change to desired permissions.

 

[vqh]

The log cycling and permissions setting is in /usr/lib/newsyslog script, just change it as desired.