[PATCH 15/16] Mapped CCI-001352 to rsyslog_send_messages_to_logserver

Shawn Wells shawn at redhat.com
Tue Jul 24 02:43:38 UTC 2012


Per feedback from DISA FSO, rsyslog_send_messages_to_logserver can be used to meet 1352 by getting the audit records to a centralized syslog
---
 RHEL6/input/system/logging.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/system/logging.xml b/RHEL6/input/system/logging.xml
index da2aa5d..ea30340 100644
--- a/RHEL6/input/system/logging.xml
+++ b/RHEL6/input/system/logging.xml
@@ -233,7 +233,7 @@ place to view the status of multiple hosts within the enterprise.
 </rationale>
 <ident cce="17248-6" />
 <oval id="rsyslog_remote_loghost" />
-<ref nist="AU-2, AU-9" disa="1348, 136" />
+<ref nist="AU-2, AU-9" disa="1348, 136, 1352" />
 </Rule>
 </Group>
 
-- 
1.7.1


--sdtB3X0nJg68CQEu--


More information about the scap-security-guide mailing list