STIGQter: STIG Summary: Red Hat Enterprise Linux 10 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

RHEL 10 must have the rsyslog service set to active.

DISA Rule

SV-280984r1165307_rule

Vulnerability Number

V-280984

Group Title

SRG-OS-000040-GPOS-00018

Rule Version

RHEL-10-200641

Severity

CAT II

CCI(s)

CCI-000133 - Ensure that audit records containing information that establishes the source of the event.

Weight

Fix Recommendation

Configure RHEL 10 to enable the rsyslog service with the following command:

$ sudo systemctl enable --now rsyslog

Check Contents

Verify RHEL 10 rsyslog is active with the following command:

$ systemctl is-active rsyslog
active

If the rsyslog service is not active, this is a finding.

Vulnerability Number

V-280984

Documentable

False

Rule Version

RHEL-10-200641

Severity Override Guidance

Verify RHEL 10 rsyslog is active with the following command:

$ systemctl is-active rsyslog
active

If the rsyslog service is not active, this is a finding.

Check Content Reference

Target Key

5733