mediumloggingverified ✓rollback-safe
Ensure rsyslog log file creation mode is configured
rsyslog-file-permissions · RHEL ≥ 8 · 1 impl
Description
The $FileCreateMode setting in /etc/rsyslog.conf must be properly configured.
Rationale
Improper $FileCreateMode configuration could weaken system security controls.
Check → Remediate
Checkconfig_value
- path:
- /etc/rsyslog.conf
- key:
- $FileCreateMode
- expected:
- 0640
- delimiter:
Remediateconfig_set
- path:
- /etc/rsyslog.conf
- key:
- $FileCreateMode
- value:
- 0640
- separator:
- reload:
- rsyslog
Framework references
CIS
rhel8 6.2.2.4rhel9 6.2.3.4rhel10 6.2.3.4
NIST 800-53
AU-9AC-6
Live verification
rhel10:checkrhel8:checkrhel9:check
#rsyslog#logging#permissions