Skip to content
Log In

Ensure syslog-ng is Installed

An XCCDF Rule

Description

syslog-ng can be installed in replacement of rsyslog. The syslog-ng-core package can be installed with the following command: 
$ sudo zypper install syslog-ng-core

Rationale

The syslog-ng-core package provides the syslog-ng daemon, which provides system logging services.

ID
xccdf_org.ssgproject.content_rule_package_syslogng_installed
Severity
Medium
References
Updated

Remediation Templates

A Puppet Snippet

include install_syslog-ng
class install_syslog-ng {
  package { 'syslog-ng':
    ensure => 'installed',
  }
}

An Ansible Snippet

- name: Gather the package facts
  package_facts:
    manager: auto
  tags:
  - NIST-800-53-CM-6(a)
  - enable_strategy

OS Build Blueprint

[[packages]]
name = "syslog-ng"
version = "*"

A Shell Script

# Remediation is applicable only in certain platforms
if rpm --quiet -q kernel-default; then
zypper install -y "syslog-ng"

else
    >&2 echo 'Remediation is not applicable, nothing was done'
fi