Profile My skills Saved Collections Edit profile Submit a skill

CIS Ubuntu 14.04 LTS - 4.2.2.1 Ensure syslog-ng service is enabled

Enable the syslog-ng service to ensure system logging is active

cyberstrikeus Updated
Coding & Dev Tools

File contents

4.2.2.1 Ensure syslog-ng service is enabled (Scored)

Profile Applicability

  • Level 1 - Server
  • Level 1 - Workstation

Description

Once the syslog-ng package is installed it needs to be activated.

Rationale

If the syslog-ng service is not activated the system may default to the syslogd service or lack logging instead.

Audit Procedure

Run the following to ensure proper start links for syslog-ng exist in /etc/rc*.d:

ls /etc/rc*.d/S*syslog-ng

Expected Result

/etc/rc2.d/S10syslog-ng  /etc/rc3.d/S10syslog-ng  /etc/rc4.d/S10syslog-ng
/etc/rc5.d/S10syslog-ng

Start links should exist for run levels 2, 3, 4, and 5.

Remediation

Run the following command to enable syslog-ng:

update-rc.d syslog-ng enable

Default Value

syslog-ng is not installed by default on Ubuntu 14.04.

References

  1. CIS Controls v6.1 - 6.2 Ensure Audit Log Settings Support Appropriate Log Entry Formatting

Profile

  • Level 1 - Server
  • Level 1 - Workstation

cyberstrikeus/cyberstrike/tree/main/.cyberstrike/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-linux-14-04-lts-benchmark-v2/cis-ubuntu1404-v210-4-2-2-1 commit a76458135d

Browse category

Frequently asked questions

npx skillmds@latest add cyberstrikeus/cis-ubuntu-14-04-lts-4-2-2-1-ensure-syslog-ng-service-is-ena