Detections
Analytics

GEN003160 - Cron logging must be implemented - syslog.conf

Information

Cron logging can be used to trace the successful or unsuccessful execution of cron jobs. It can also be used to spot intrusions into the use of the cron facility by unauthorized and malicious users.

Solution

Edit /etc/syslog.conf or /etc/rsyslog.conf and setup cron logging

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-2d., CAT|II, CCI|CCI-000126, Group-ID|V-982, Rule-ID|SV-27352r2_rule, STIG-ID|GEN003160, Vuln-ID|V-982

Plugin: Unix

Control ID: 62e25fd1df6009916f8b87f5e9a3285c1fe859fba6e0debc77f5351b316c7595