Detections
Analytics

5.1.2 Ensure newsyslog is configured

Information

The system includes the capability of rotating log files regularly to avoid filling up the system with logs or making the logs unmanageably large. The files /etc/newsyslog.conf, /etc/newsyslog.conf.d/*.conf and /usr/local/etc/newsyslog.conf.d/*.conf is the configuration file used to rotate log files created by syslog.

By keeping the log files smaller and more manageable, a system administrator can easily archive these files to another system and spend less time looking through inordinately large log files.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Edit /etc/newsyslog.conf, /etc/newsyslog.conf.d/*.conf and /usr/local/etc/newsyslog.conf.d/*.conf to ensure logs are rotated according to site policy.

See Also

https://workbench.cisecurity.org/benchmarks/19044

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4, 800-53|AU-8, CSCv7|6.4

Plugin: Unix

Control ID: 44416548c8f7c2696b8d3bda3bb5613b843aadc41e274b6b1b0ac753b3236f74