AIX must implement a remote syslog server that is documented using site-defined procedures.
An XCCDF Rule
Description
If a remote log host is in use and it has not been justified and documented, sensitive information could be obtained by unauthorized users without the administrator’s knowledge. Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224
- ID
- SV-215312r991589_rule
- Version
- AIX7-00-002131
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Edit the /etc/syslog.conf file to include a documented and approved remote log host.