STIGQter: STIG Summary: Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

Ubuntu 24.04 LTS must be configured to preserve log records from failure events.

DISA Rule

SV-270653r1067141_rule

Vulnerability Number

V-270653

Group Title

SRG-OS-000269-GPOS-00103

Rule Version

UBTU-24-100200

Severity

CAT II

CCI(s)

CCI-001665 - Preserve organization-defined system state information in the event of a system failure.

Weight

Fix Recommendation

Configure the log service to collect failure events.

Install the log service (if the log service is not already installed) with the following command:

$ sudo apt install -y rsyslog

Enable the log service with the following command:

$ sudo systemctl enable --now rsyslog

Check Contents

Verify the log service is installed properly with the following command:

$ dpkg -l | grep rsyslog
ii rsyslog 8.2312.0-3ubuntu9 amd64 reliable system and kernel logging daemon

If the "rsyslog" package is not installed, this is a finding.

Check that the log service is enabled with the following command:

$ systemctl is-enabled rsyslog
enabled

If the command above returns "disabled", this is a finding.

Check that the log service is properly running and active on the system with the following command:

$ systemctl is-active rsyslog
active

If the command above returns "inactive", this is a finding.

Vulnerability Number

V-270653

Documentable

False

Rule Version

UBTU-24-100200

Severity Override Guidance

Check Content Reference

Target Key

5673