[PATCH] [RHEL/6] rsyslog_nolisten + system/logging.xml changes

Jan Lieskovsky jlieskov at redhat.com
Mon Apr 7 14:30:30 UTC 2014


* checks/rsyslog_nolisten.xml:

When checking /etc/rsyslog.conf that there is none of
($UDPServerRun | $InputTCPServerRun | $InputRELPServerRun)
directives present, check also their versions possibly
prefixed with starting whitespace characters (otherwise
we can report system is safe wrt to this check, when it
actually wasn't).

* RHEL/6/input/system/logging.xml

Use $ModLoad imtcp (as stated in manual page) rather than
$ModLoad imtcp.so form when checking for loaded UDP / TCP / RELP
modules. Also, fix typo in the UDP directive (there's no such
$InputUDPServerRun rsyslogd option).

* RHEL/7/input/system/logging.xml

Changes same as in RHEL/6's case.

Please review.

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-RHEL-6-rsyslog_nolisten-when-checking-if-rsyslogd-re.patch
Type: text/x-patch
Size: 5365 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140407/38beeb3d/attachment.bin>


More information about the scap-security-guide mailing list