Rules with anssi Reference in Guide to the Secure Configuration of Red Hat Enterprise Linux 7

Reference (anssi) | Rule Title | Description | Rationale | Variable Setting

NT28(R5)

Enable rsyslog Service

The `rsyslog` service provides syslog-style logging by default on Red Hat Enterprise Linux 7. The `rsyslog` service can be enabled with the following command:

    $ sudo systemctl enable rsyslog.service

The `rsyslog` service must be running in order to provide logging services, which are essential to system administration.

NT28(R5)

Ensure rsyslog is Installed

Rsyslog is installed by default. The `rsyslog` package can be installed with the following command:

    $ sudo yum install rsyslog

The rsyslog package provides the rsyslog daemon, which provides system logging services.

NT28(R5)

Ensure Users Re-Authenticate for Privilege Escalation - sudo !authenticate

The sudo `!authenticate` option, when specified, allows a user to execute commands using sudo without having to authenticate. This should be disabled by making sure that the `!authenticate` option does not exist in `/etc/sudoers` configuration file or any sudo configuration snippets in `/etc/sudoers.d/`.

Without re-authentication, users may access resources or perform tasks for which they do not have authorization.
When operating systems provide the capability to escalate a functional capability, it is critical that the user re-authenticate.

NT28(R5)

Ensure Users Re-Authenticate for Privilege Escalation - sudo NOPASSWD

The sudo `NOPASSWD` tag, when specified, allows a user to execute commands using sudo without having to authenticate. This should be disabled by making sure that the `NOPASSWD` tag does not exist in `/etc/sudoers` configuration file or any sudo configuration snippets in `/etc/sudoers.d/`.

Without re-authentication, users may access resources or perform tasks for which they do not have authorization.
When operating systems provide the capability to escalate a functional capability, it is critical that the user re-authenticate.

NT28(R46)

Enable rsyslog Service

The `rsyslog` service provides syslog-style logging by default on Red Hat Enterprise Linux 7. The `rsyslog` service can be enabled with the following command:

    $ sudo systemctl enable rsyslog.service

The `rsyslog` service must be running in order to provide logging services, which are essential to system administration.

NT28(R46)

Ensure rsyslog is Installed

Rsyslog is installed by default. The `rsyslog` package can be installed with the following command:

    $ sudo yum install rsyslog

The rsyslog package provides the rsyslog daemon, which provides system logging services.