← Back to Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide

V-282616

CAT II (Medium)

TOSS 5 must have the rsyslog package installed.

Rule ID

SV-282616r1200828_rule

STIG

Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-001851

Discussion

"rsyslogd" is a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Couple this utility with "gnutls" (which is a secure communications library implementing the SSL, TLS, and DTLS protocols), to create a method to securely encrypt and offload auditing.

Check Content

Verify TOSS 5 has the "rsyslogd" package installed using the following command:

$ sudo dnf list --installed rsyslog

Example output:

rsyslog.x86_64          8.2102.0-101.el9_0.1

If the "rsyslogd" package is not installed, this is a finding.

Fix Text

Install the "rsyslogd" package using the following command:
 
$ sudo dnf install rsyslogd