[PATCH] removal of Rule which does not apply to rsyslog

Shawn Wells shawn at redhat.com
Tue Apr 16 19:00:12 UTC 2013


On 4/16/13 2:00 PM, Jeffrey Blank wrote:
> Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
> ---
>   RHEL6/input/system/logging.xml |   18 ------------------
>   1 files changed, 0 insertions(+), 18 deletions(-)
>
> diff --git a/RHEL6/input/system/logging.xml b/RHEL6/input/system/logging.xml
> index ffe05c0..1be663c 100644
> --- a/RHEL6/input/system/logging.xml
> +++ b/RHEL6/input/system/logging.xml
> @@ -96,24 +96,6 @@ operator="equals" interactive="0">
>   <value selector="root">root</value>
>   </Value>
>   
> -<Rule id="rsyslog_logfiles_exist">
> -<title>Ensure Log Files Exist</title>
> -<description>
> -The log files written by <tt>rsyslog</tt> are determined by the second part of each rule line in
> -<tt>/etc/rsyslog.conf</tt>. These typically all appear in <tt>/var/log</tt>.
> -For any log file <i>LOGFILE</i> referenced in <tt>/etc/rsyslog.conf</tt> which
> -does not already exist the following commands will create it and apply proper
> -permissions:
> -<pre># touch <i>LOGFILE</i>
> -# chown root:root <i>LOGFILE</i>
> -# chmod 0600 <i>LOGFILE</i></pre>
> -</description>
> -<rationale>If a log file referenced by rsyslog does not exist, rsyslog
> -will not create it and important log messages can be lost.
> -</rationale>
> -<ident cce="26818-5" />
> -<ref nist="" />
> -</Rule>
>   
>   <Rule id="userowner_rsyslog_files" severity="medium">
>   <title>Ensure Log Files Are Owned By Appropriate User</title>

Was this rule part of any profiles? I don't think it was -- just wanted 
to check.


More information about the scap-security-guide mailing list