STIGQter: STIG Summary: Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

Ubuntu 22.04 LTS must be configured to preserve log records from failure events.

DISA Rule

SV-260588r991562_rule

Vulnerability Number

V-260588

Group Title

SRG-OS-000269-GPOS-00103

Rule Version

UBTU-22-652010

Severity

CAT II

CCI(s)

• CCI-001665 - Preserve organization-defined system state information in the event of a system failure.

Weight

10

Fix Recommendation

Install the log service by using the following command:

$ sudo apt-get install rsyslog

Enable and activate the log service by using the following command:

$ sudo systemctl enable rsyslog.service --now

Check Contents

Verify the log service is installed properly by using the following command:

$ dpkg -l | grep rsyslog
ii rsyslog 8.2112.0-2ubuntu2.2 amd64 reliable system and kernel logging daemon

If the "rsyslog" package is not installed, this is a finding.

Check that the log service is enabled and active by using the following commands:

$ systemctl is-enabled rsyslog.service
enabled

$ systemctl is-active rsyslog.service
active

If "rsyslog.service" is not enabled and active, this is a finding.

Vulnerability Number

V-260588

Documentable

False

Rule Version

UBTU-22-652010

Severity Override Guidance

Verify the log service is installed properly by using the following command:

$ dpkg -l | grep rsyslog
ii rsyslog 8.2112.0-2ubuntu2.2 amd64 reliable system and kernel logging daemon

If the "rsyslog" package is not installed, this is a finding.

Check that the log service is enabled and active by using the following commands:

$ systemctl is-enabled rsyslog.service
enabled

$ systemctl is-active rsyslog.service
active

If "rsyslog.service" is not enabled and active, this is a finding.

Check Content Reference

M

Target Key

5594