cis-ubuntu1804-v220-5-1-2-4
Ensure rsyslog default file permissions are configured
1.21k repo starsObserved in 1 repos
DevOps & Security
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure rsyslog default file permissions are configured
Ensure rsyslog is not configured to receive logs from a remote client
Ensure all logfiles have appropriate access configured
Verify that auditd and audispd-plugins packages are installed
Verify that the auditd daemon is enabled and running to record system events
Configure the audit_backlog_limit kernel parameter to prevent audit event loss
Configure the system to halt when audit logs are full to prevent data loss
Ensure unsuccessful unauthorized file access attempts are collected
Ensure successful file system mounts are collected
Ensure file deletion events by users are collected