Configure CA certificate for rsyslog remote logging
An XCCDF Rule
Description
Configure CA certificate for rsyslog logging
to remote server using Transport Layer Security (TLS)
using correct path for the DefaultNetstreamDriverCAFile
global option in /etc/rsyslog.conf, for example with the following command:
echo 'global(DefaultNetstreamDriverCAFile="/etc/pki/tls/cert.pem")' >> /etc/rsyslog.confReplace the
/etc/pki/tls/cert.pem in the above command with the path to the file with CA certificate generated for the purpose of remote logging.
warning alert: Warning
Automatic remediation is not available as each organization has unique requirements.
Rationale
The CA certificate needs to be set or rsyslog.service
fails to start with
error: ca certificate is not set, cannot continue
- ID
- xccdf_org.ssgproject.content_rule_rsyslog_remote_tls_cacert
- Severity
- Medium
- Updated