AlmaLinux OS 9 must have the packages required for encrypting offloaded audit logs installed.
Overview
| Finding ID |
Version |
Rule ID |
IA Controls |
Severity |
| V-269416 |
ALMA-09-039620 |
SV-269416r1050299_rule |
|
Medium |
| Description |
| The rsyslog-gnutls package provides Transport Layer Security (TLS) support for the rsyslog daemon, which enables secure remote logging. |
Details
| Check Text (C-73447r1048624_chk) |
Verify that the rsyslog-gnutls package is installed with the following command:
$ dnf list --installed rsyslog-gnutls
rsyslog-gnutls.x86_64 8.2102.0-111.el9 @AppStream
If the "rsyslog-gnutls" package is not installed, this is a finding. |
| Fix Text (F-73348r1048625_fix) |
Install the rsyslog-gnutls package with the following command:
$ dnf install rsyslog-gnutls |