Detections
Analytics

1.55 RHEL-10-200640

Information

RHEL 10 must have the "rsyslog" package installed.

GROUP ID: V-280983
RULE ID: SV-280983r1195368

The "rsyslogd" is a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support local and remote logging. Couple this utility with "gnutls" (which is a secure communications library implementing the Secure Sockets Layer [SSL], Transport Layer Security [TLS], and Datagram TLS [DTLS] protocols), to create a method to securely encrypt and off-load auditing.

Satisfies: SRG-OS-000479-GPOS-00224, SRG-OS-000051-GPOS-00024

Solution

Configure RHEL 10 to have the "rsyslogd" package installed with the following command:

$ sudo dnf -y install rsyslogd

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4(1), 800-53|AU-6(4), CAT|II, CCI|CCI-000154, CCI|CCI-001851, Rule-ID|SV-280983r1195368_rule, STIG-ID|RHEL-10-200640, Vuln-ID|V-280983

Plugin: Unix

Control ID: 1815e062aeedaa19690d82c09eea7b808f670537dec1224d5067955ea3d370e1