AlmaLinux OS 9 must have the packages required for encrypting offloaded audit logs installed.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-269416ALMA-09-039620SV-269416r1050299_ruleCCI-000803medium
Description
The rsyslog-gnutls package provides Transport Layer Security (TLS) support for the rsyslog daemon, which enables secure remote logging.
STIGDate
CloudLinux AlmaLinux OS 9 Security Technical Implementation Guide2025-05-22

Details

Check Text (C-269416r1050299_chk)

Verify that the rsyslog-gnutls package is installed with the following command: $ dnf list --installed rsyslog-gnutls rsyslog-gnutls.x86_64 8.2102.0-111.el9 @AppStream If the "rsyslog-gnutls" package is not installed, this is a finding.

Fix Text (F-73348r1048625_fix)

Install the rsyslog-gnutls package with the following command: $ dnf install rsyslog-gnutls