[PATCH 17/36] Added severity medium, item not in RHEL 5 STIG.

Michele Newman mnewman at redhat.com
Thu Oct 25 13:50:02 UTC 2012


---
 RHEL6/input/system/logging.xml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/RHEL6/input/system/logging.xml b/RHEL6/input/system/logging.xml
index ff1b7a0..c5a0ddb 100644
--- a/RHEL6/input/system/logging.xml
+++ b/RHEL6/input/system/logging.xml
@@ -17,7 +17,7 @@ This section discusses how to configure rsyslog for
 best effect, and how to use tools provided with the system to maintain and
 monitor logs.</description>
 
-<Rule id="package_rsyslog_installed">
+<Rule id="package_rsyslog_installed" severity="medium">
 <title>Ensure rsyslog is Installed</title>
 <description>
 Rsyslog is installed by default. 
@@ -37,7 +37,7 @@ system logging services.
 </Rule>
 
 
-<Rule id="service_rsyslog_enabled">
+<Rule id="service_rsyslog_enabled" severity="medium">
 <title>Enable rsyslog Service</title>
 <description>The <tt>rsyslog</tt> service provides syslog-style logging by default on RHEL 6.
 <service-enable-macro service="rsyslog" />
@@ -115,7 +115,7 @@ will not create it and important log messages can be lost.
 <ref nist="AC-3, CM-6" />
 </Rule>
 
-<Rule id="userowner_rsyslog_files">
+<Rule id="userowner_rsyslog_files" severity="medium">
 <title>Ensure Log Files Are Owned By Appropriate User</title>
 <description>The owner of all log files written by
 <tt>rsyslog</tt> should be root.
@@ -141,7 +141,7 @@ protected from unauthorized access.</rationale>
 <tested by="DS" on="20121024"/>
 </Rule>
 
-<Rule id="groupowner_rsyslog_files">
+<Rule id="groupowner_rsyslog_files" severity="medium">
 <title>Ensure Log Files Are Owned By Appropriate Group</title>
 <description>The group-owner of all log files written by
 <tt>rsyslog</tt> should be root.
@@ -168,7 +168,7 @@ protected from unauthorized access.</rationale>
 </Rule>
 
 
-<Rule id="rsyslog_file_permissions">
+<Rule id="rsyslog_file_permissions" severity="medium">
 <title>Ensure System Log Files Have Correct Permissions</title>
 <description>The file permissions for all log files written by
 rsyslog should be set to 600, or more restrictive.
-- 
1.8.0



More information about the scap-security-guide mailing list