Ensure rsyslog default file permissions configured

It is important to ensure that log files have the correct permissions to ensure that sensitive data is archived and protected.

Edit the /etc/rsyslog.conf and set $FileCreateMode to 0640 or more restrictive: $FileCreateMode 0640

Audit Name: Tenable Cisco Firepower Management Center OS Best Practices Audit

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-9(4), CSCv6|5.1

Plugin: Unix

Control ID: eaa9ebbeb91b8b97e7ab5e560cc02004c47016ae3f72f32a57acc31f1a9f66d9