[PATCH 15/16] Mapped CCI-001352 to rsyslog_send_messages_to_logserver
Shawn Wells
shawn at redhat.com
Tue Jul 24 02:43:38 UTC 2012
Per feedback from DISA FSO, rsyslog_send_messages_to_logserver can be used to meet 1352 by getting the audit records to a centralized syslog
---
RHEL6/input/system/logging.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/RHEL6/input/system/logging.xml b/RHEL6/input/system/logging.xml
index da2aa5d..ea30340 100644
--- a/RHEL6/input/system/logging.xml
+++ b/RHEL6/input/system/logging.xml
@@ -233,7 +233,7 @@ place to view the status of multiple hosts within the enterprise.
</rationale>
<ident cce="17248-6" />
<oval id="rsyslog_remote_loghost" />
-<ref nist="AU-2, AU-9" disa="1348, 136" />
+<ref nist="AU-2, AU-9" disa="1348, 136, 1352" />
</Rule>
</Group>
--
1.7.1
--sdtB3X0nJg68CQEu--
More information about the scap-security-guide
mailing list