[PATCH 1/2] corrected logrotate activation rule
Shawn Wells
shawn at redhat.com
Fri Oct 11 14:31:16 UTC 2013
On 10/11/13 10:19 AM, David Smith wrote:
> ---
> RHEL6/input/system/logging.xml | 16 ++++++++++++----
> 1 files changed, 12 insertions(+), 4 deletions(-)
>
> diff --git a/RHEL6/input/system/logging.xml b/RHEL6/input/system/logging.xml
> index ae319f6..1f88fa4 100644
> --- a/RHEL6/input/system/logging.xml
> +++ b/RHEL6/input/system/logging.xml
> @@ -357,13 +357,21 @@ used.</description>
>
> <Rule id="ensure_logrotate_activated">
> <title>Ensure Logrotate Runs Periodically</title>
> -<description>The <tt>logrotate</tt> service should be
> -enabled.</description>
> +<description>The <tt>logrotate</tt> utility allows for the automatic rotation of
> +log files. The frequency of rotation is specified in <tt>/etc/logrotate.conf</tt>,
> +which triggers a cron task. To configure logrotate to run daily, add or correct
> +the following line in <tt>/etc/logrotate.conf</tt>:
> +<pre># rotate log files <i>frequency</i>
> +daily</pre>
> +</description>
> <rationale>Log files that are not properly rotated run the risk of growing so large
> that they fill up the /var/log partition. Valuable logging information could be lost
> if the /var/log partition becomes full.</rationale>
> -<ocil>
> -<service-enable-check-macro service="logrotate" />
> +<ocil clause="logrotate is not configured to run daily">
> +To determine the status and frequency of logrotate, run the following command:
> +<pre># grep logrotate /var/log/cron*</pre>
> +If logrotate is configured properly, output should include references to
> +<tt>/etc/cron.daily</tt>.
> </ocil>
> <ident cce="27014-0" />
> <oval id="logrotate_rotate_all_files" />
ack
More information about the scap-security-guide
mailing list