Enable rsyslog Service
An XCCDF Rule
Description
The rsyslog
service provides syslog-style logging by default on Red Hat Enterprise Linux CoreOS 4.
The rsyslog
service can be enabled with the following manifest:
--- apiVersion: machineconfiguration.openshift.io/v1 kind: MachineConfig metadata: labels: machineconfiguration.openshift.io/role: master name: 75-master-rsyslog-enable spec: config: ignition: version: 3.1.0 systemd: units: - name: rsyslog.service enabled: true
This will enable the rsyslog
service in all the
nodes labeled with the "master" role.
Note that this needs to be done for each MachineConfigPool
For more information on how to configure nodes with the Machine Config Operator see the relevant documentation.
Rationale
The rsyslog
service must be running in order to provide
logging services, which are essential to system administration.
- ID
- xccdf_org.ssgproject.content_rule_service_rsyslog_enabled
- Severity
- Medium
- References
- Updated