openstack/ansible-hardening
Code Issues Proposed changes

[Docs] Exception: Disable syslog reception

Browse Source 
This patch adds documentation for deployers on how they should configure
rsyslog log reception depending on the server's role.

Implements: blueprint security-rhel7-stig
Change-Id: I361f1473d09a327aad61da6c936344813a74ca18
This commit is contained in:
Major Hayden 2016-12-06 10:38:39 -06:00
parent 4e8bf6705f
commit d63a7098cd
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
doc/metadata/rhel7/RHEL-07-030780.rst
View File

@ -1,7 +1,14 @@
---
id: RHEL-07-030780
status: not implemented
status: exception - manual intervention
tag: misc
---
This STIG requirement is not yet implemented.
Deployers must take manual steps to add or remove syslog reception
configuration lines depending on a server's role:
* If the server is a log aggregation server, deployers must configure the
server to receive syslog output from the other servers via TCP connections.
* If the server is not a log aggregation server, deployers must configure the
server so that it does not accept syslog output from other servers.