Ensure rsyslog-gnutls is installed

An XCCDF Rule

Description

TLS protocol support for rsyslog is installed. The rsyslog-gnutls package can be installed with the following command:

$ apt-get install rsyslog-gnutls

Rationale

The rsyslog-gnutls package provides Transport Layer Security (TLS) support for the rsyslog daemon, which enables secure remote logging.

ID: xccdf_org.ssgproject.content_rule_package_rsyslog-gnutls_installed
Severity: Medium
References: CCI-000366

FTP_ITC_EXT.1.1

SRG-OS-000120-GPOS-00061 SRG-OS-000480-GPOS-00227

R71
Updated: about 1 month ago

Remediation Templates

- name: Ensure rsyslog-gnutls is installed
  package:
    name: rsyslog-gnutls
    state: present
  when: ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
  tags:  - enable_strategy
  - low_complexity
  - low_disruption
  - medium_severity
  - no_reboot_needed
  - package_rsyslog-gnutls_installed

include install_rsyslog-gnutls
class install_rsyslog-gnutls {
  package { 'rsyslog-gnutls':
    ensure => 'installed',
  }
}

[[packages]]
name = "rsyslog-gnutls"
version = "*"

# Remediation is applicable only in certain platforms
if [ ! -f /.dockerenv ] && [ ! -f /run/.containerenv ]; then
DEBIAN_FRONTEND=noninteractive apt-get install -y "rsyslog-gnutls"

else
    >&2 echo 'Remediation is not applicable, nothing was done'
fi