Detections
Analytics

1.64 RHEL-10-200650

Information

RHEL 10 must have the packages required for encrypting off-loaded audit logs installed.

GROUP ID: V-280992RULE ID: SV-280992r1195379

The "rsyslog-gnutls" package provides Transport Layer Security (TLS) support for the rsyslog daemon, which enables secure remote logging.

Solution

Configure RHEL 10 to have the "rsyslog-gnutls" package installed with the following command:

$ sudo dnf -y install rsyslog-gnutls

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-7, CAT|II, CCI|CCI-000803, Rule-ID|SV-280992r1195379_rule, STIG-ID|RHEL-10-200650, Vuln-ID|V-280992

Plugin: Unix

Control ID: c3ef6e1435428095d2f9f251e74903ab9639697599a0d7e0cd36837d81977c82