RHEL 9 must have the rsyslog package installed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-258140	RHEL-09-652010	SV-258140r926407_rule		Medium

Description

rsyslogd is a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Couple this utility with "gnutls" (which is a secure communications library implementing the SSL, TLS, and DTLS protocols), to create a method to securely encrypt and offload auditing. Satisfies: SRG-OS-000479-GPOS-00224, SRG-OS-000051-GPOS-00024, SRG-OS-000480-GPOS-00227

STIG	Date
Red Hat Enterprise Linux 9 Security Technical Implementation Guide	2023-12-01

Details

Check Text ( C-61881r926405_chk )
Verify that RHEL 9 has the rsyslogd package installed with the following command: $ sudo dnf list --installed rsyslog Example output: rsyslog.x86_64 8.2102.0-101.el9_0.1 If the "rsyslogd" package is not installed, this is a finding.

Fix Text (F-61805r926406_fix)
The rsyslogd package can be installed with the following command: $ sudo dnf install rsyslogd