| name | cis-ubuntu1204-v110-8-4 |
| description | Configure logrotate |
| category | cis-os-hardening |
| version | 1.1.0 |
| author | cyberstrike-official |
| tags | ["cis","ubuntu",12.04,"linux","logging","logrotate","log-management","rotation"] |
| cis_id | 8.4 |
| cis_benchmark | CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0 |
| tech_stack | ["ubuntu","linux"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
8.4 Configure logrotate (Not Scored)
Profile Applicability
Description
The system includes the capability of rotating log files regularly to avoid filling up the system with logs or making the logs unmanageable large. The file /etc/logrotate.d/rsyslog is the configuration file used to rotate log files created by rsyslog.
Rationale
By keeping the log files smaller and more manageable, a system administrator can easily archive these files to another system and spend less time looking through inordinately large log files.
Audit Procedure
Using Command Line
Review the /etc/logrotate.d/rsyslog file to determine if the appropriate system logs are rotated according to your site policy.
cat /etc/logrotate.d/rsyslog
Expected Result
The logrotate configuration should include appropriate system logs rotated according to site policy.
Remediation
Using Command Line
Edit /etc/logrotate.d/rsyslog file to include appropriate system logs according to your site policy.
vi /etc/logrotate.d/rsyslog
Default Value
By default, logrotate is configured with basic rotation settings.
References
- CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0
Profile
Level 1 - Not Scored