Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The Red Hat Enterprise Linux operating system must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation.
Description
Discussion Text
Unintentionally running a rsyslog server accepting remote messages puts the system at increased risk. Malicious rsyslog messages sent to the server could exploit vulnerabilities in the server software itself, could introduce misleading information in to the system's logs, or could fill the system's storage leading to a Denial of Service.
If the system is intended to be a log aggregation server its use must be documented with the ISSO.
If the system is intended to be a log aggregation server its use must be documented with the ISSO.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.