Skip to content

Ubuntu 22.04 LTS must be configured to preserve log records from failure events.

An XCCDF Rule

Description

Failure to a known state can address safety or security in accordance with the mission/business needs of the organization. Failure to a known secure state helps prevent a loss of confidentiality, integrity, or availability in the event of a failure of the information system or a component of the system. Preserving operating system state information helps to facilitate operating system restart and return to the operational mode of the organization with least disruption to mission/business processes.

ID
SV-260588r991562_rule
Version
UBTU-22-652010
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Install the log service by using the following command:  
 
     $ sudo apt-get install rsyslog 
  
Enable and activate the log service by using the following command:  
  
     $ sudo systemctl enable rsyslog.service --now