mediumloggingverified ✓
Ensure cron logging is enabled
cron-logging · RHEL ≥ 8 · 1 impl
Description
Cron job execution must be logged to allow security monitoring and troubleshooting of scheduled tasks.
Rationale
Logging cron activity enables detection of unauthorized scheduled tasks and troubleshooting of job failures.
Check → Remediate
Checkcommand
grep -E '^cron\.' /etc/rsyslog.conf /etc/rsyslog.d/*.conf 2>/dev/null
- expected_exit:
- 0
Remediatemanual
- note:
- Add 'cron.* /var/log/cron' to /etc/rsyslog.conf or a file in /etc/rsyslog.d/
Framework references
STIG
V-280991 / RHEL-10-200648V-258150 / RHEL-09-652060V-230387
NIST 800-53
AU-4AU-12
Live verification
rhel8:checkrhel9:check
#logging#cron#rsyslog