Skip to content

Enable syslog-ng Service

An XCCDF Rule

Description

The syslog-ng service (in replacement of rsyslog) provides syslog-style logging by default on Debian. The syslog-ng service can be enabled with the following manifest:

---
apiVersion: machineconfiguration.openshift.io/v1
kind: MachineConfig
metadata:
  labels:
    machineconfiguration.openshift.io/role: master
  name: 75-master-syslog-ng-enable
spec:
  config:
    ignition:
      version: 3.1.0
    systemd:
      units:
      - name: syslog-ng.service
        enabled: true

This will enable the syslog-ng service in all the nodes labeled with the "master" role.

Note that this needs to be done for each MachineConfigPool

For more information on how to configure nodes with the Machine Config Operator see the relevant documentation.

Rationale

The syslog-ng service must be running in order to provide logging services, which are essential to system administration.

ID
xccdf_org.ssgproject.content_rule_service_syslogng_enabled
Severity
Medium
References
Updated