Enable syslog-ng Service
An XCCDF Rule
Description
The syslog-ng
service (in replacement of rsyslog) provides syslog-style logging by default on Debian.
The syslog-ng
service can be enabled with the following manifest:
--- apiVersion: machineconfiguration.openshift.io/v1 kind: MachineConfig metadata: labels: machineconfiguration.openshift.io/role: master name: 75-master-syslog-ng-enable spec: config: ignition: version: 3.1.0 systemd: units: - name: syslog-ng.service enabled: true
This will enable the syslog-ng
service in all the
nodes labeled with the "master" role.
Note that this needs to be done for each MachineConfigPool
For more information on how to configure nodes with the Machine Config Operator see the relevant documentation.
Rationale
The syslog-ng
service must be running in order to provide
logging services, which are essential to system administration.
- ID
- xccdf_org.ssgproject.content_rule_service_syslogng_enabled
- Severity
- Medium
- References
- Updated