Detections
Analytics

OL07-00-021100 - The Oracle Linux operating system must have cron logging implemented.

Information

Cron logging can be used to trace the successful or unsuccessful execution of cron jobs. It can also be used to spot intrusions into the use of the cron facility by unauthorized and malicious users.

Solution

Configure 'rsyslog' to log all cron messages by adding or updating the following line to '/etc/rsyslog.conf' or a configuration file in the /etc/rsyslog.d/ directory:

cron.* /var/log/cron

The rsyslog daemon must be restarted for the changes to take effect:
$ sudo systemctl restart rsyslog.service

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_7_V3R5_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-221750r991589_rule, STIG-ID|OL07-00-021100, STIG-Legacy|SV-108343, STIG-Legacy|V-99239, Vuln-ID|V-221750

Plugin: Unix

Control ID: bbdd79cfd9359413af4c0278ce5125bd722097fa95a5fb13a9b711354829f345