Configure Logging

An XCCDF Rule

Description

Ensure that the following line exists in /etc/rsyslog.conf:

daemon.*           /var/log/daemon.log

Configure logwatch or other log monitoring tools to summarize error conditions reported by the dhcpd process.

Rationale

By default, dhcpd logs notices to the daemon facility. Sending all daemon messages to a dedicated log file is part of the syslog configuration outlined in the Logging and Auditing section

ID: xccdf_org.ssgproject.content_rule_dhcp_server_configure_logging
Severity: Unknown
References: 1 12 13 14 15 16 2 3 5 6 7 8 9

APO10.01 APO10.03 APO10.04 APO10.05 APO11.04 BAI03.05 DSS01.03 DSS03.05 DSS05.02 DSS05.04 DSS05.05 DSS05.07 MEA01.01 MEA01.02 MEA01.03 MEA01.04 MEA01.05 MEA02.01

4.3.2.6.7 4.3.3.3.9 4.3.3.5.8 4.3.4.4.7 4.4.2.1 4.4.2.2 4.4.2.4

SR 2.10 SR 2.11 SR 2.12 SR 2.8 SR 2.9 SR 6.1 SR 6.2

A.12.4.1 A.12.4.2 A.12.4.3 A.12.4.4 A.12.7.1 A.14.2.7 A.15.2.1 A.15.2.2

AU-12(a) AU-12(c) CM-6(a)

DE.CM-1 DE.CM-3 DE.CM-7 ID.SC-4 PR.PT-1

CCE-80336-1
Updated: about 1 year ago