Navigate

Check: RHEL-09-652015

RHEL 9 STIG: RHEL-09-652015 (in version v2 r3)

Title

RHEL 9 must have the packages required for encrypting offloaded audit logs installed. (Cat II impact)

Discussion

The rsyslog-gnutls package provides Transport Layer Security (TLS) support for the rsyslog daemon, which enables secure remote logging. Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000120-GPOS-00061

Check Content

Verify that RHEL 9 has the rsyslog-gnutls package installed with the following command: $ dnf list --installed rsyslog-gnutls Example output: rsyslog-gnutls.x86_64 8.2102.0-101.el9_0.1 If the "rsyslog-gnutls" package is not installed, this is a finding.

Fix Text

The rsyslog-gnutls package can be installed with the following command: $ sudo dnf install rsyslog-gnutls

Additional Identifiers

Rule ID: SV-258141r1045280_rule

Vulnerability ID: V-258141

Group Title: SRG-OS-000480-GPOS-00227

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000803	Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
IA-7	Cryptographic Module Authentication