lowloggingverified ✓✓rollback-safe
Ensure journald ForwardToSyslog is disabled
journald-no-forward-syslog · RHEL ≥ 8 · 1 impl
Description
The ForwardToSyslog setting in /etc/systemd/journald.conf must be properly configured.
Rationale
Improper ForwardToSyslog configuration could weaken system security controls.
Check → Remediate
Checkconfig_value
- path:
- /etc/systemd/journald.conf
- key:
- ForwardToSyslog
- expected:
- no
Remediateconfig_set
- path:
- /etc/systemd/journald.conf
- key:
- ForwardToSyslog
- value:
- no
- separator:
- =
- reload:
- systemd-journald
Framework references
CIS
rhel8 6.2.1.1.4rhel9 6.2.2.2rhel10 6.2.2.2
NIST 800-53
AU-4AU-12
Live verification
rhel10:checkrhel8:checkrhel9:checkrhel9:full
#journald#logging