Skip to content

Commit

Permalink
Add rule to ubuntu2404 CIS control 6.1.1.4
Browse files Browse the repository at this point in the history
  • Loading branch information
mpurg committed Jan 22, 2025
1 parent d1b640b commit f4784b4
Showing 1 changed file with 10 additions and 2 deletions.
12 changes: 10 additions & 2 deletions controls/cis_ubuntu2404.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2272,8 +2272,16 @@ controls:
levels:
- l1_server
- l1_workstation
status: planned
notes: TODO. Rule does not seem to be implemented, nor does it map to any rules in ubuntu2204 profile.
rules:
- logging_services_active
status: automated
notes: |
The title of this rule is misleading. The actual audit checks that at least
one of "rsyslogd" and "systemd-journald" is active.
See https://workbench.cisecurity.org/benchmarks/18959/tickets/23601
Remediation is not automated as the choice of correct logging service
is dependent on site policy.
- id: 6.1.2.1.1
title: Ensure systemd-journal-remote is installed (Automated)
Expand Down

0 comments on commit f4784b4

Please sign in to comment.