back to labs
CIS: Harden System Logging (journald + rsyslog)
MediumLinux Security15-20 minThe brief
Logs are only useful if they survive and stay private. Per the CIS Benchmark logging section, configure systemd-journald to store logs persistently and compress them, and set rsyslog to create new log files owner/group-readable only (0640). Grading reads /etc/systemd/journald.conf and /etc/rsyslog.conf the way a CIS-CAT scan would.
What you'll do
- journald Storage = persistent
- journald Compress = yes
- rsyslog creates log files as 0640 ($FileCreateMode 0640)
Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.