Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
OL 9 must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation.
Description
Discussion Text
Unintentionally running a rsyslog server accepting remote messages puts the system at increased risk. Malicious rsyslog messages sent to the server could exploit vulnerabilities in the server software itself, could introduce misleading information into the system's logs, or could fill the system's storage leading to a denial of service.
If the system is intended to be a log aggregation server, its use must be documented with the information system security officer (ISSO).
If the system is intended to be a log aggregation server, its use must be documented with the information system security officer (ISSO).
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.