Skip to content

RHEL 10 CIS: Implement 6.2.1.4 #14242

Merged
Mab879 merged 4 commits intoComplianceAsCode:masterfrom
vojtapolasek:cis_only_one_logging_system
Dec 15, 2025
Merged

RHEL 10 CIS: Implement 6.2.1.4 #14242
Mab879 merged 4 commits intoComplianceAsCode:masterfrom
vojtapolasek:cis_only_one_logging_system

Conversation

@vojtapolasek
Copy link
Collaborator

@vojtapolasek vojtapolasek commented Dec 15, 2025

Description:

  • add new rule ensure_journald_and_rsyslog_not_active_together with only OVAL check and test scnearios
    • the rule ensures that there is only one logging system running and it is systemd-journald

Rationale:

  • covering 6.2.1.4 from RHEL 10 CIS
  • I don't think that we should remediate this automatically by removing rsyslog because at the end of the day, the user is responsible for choosing the logging system
  • and they would need to done some tailoring anyway in case they choose rsyslog over systemd-journald

Review Hints:

Test with Automatus.

@vojtapolasek vojtapolasek added this to the 0.1.80 milestone Dec 15, 2025
@vojtapolasek vojtapolasek requested a review from a team as a code owner December 15, 2025 14:08
@vojtapolasek vojtapolasek added the New Rule Issues or pull requests related to new Rules. label Dec 15, 2025
@vojtapolasek vojtapolasek added the CIS CIS Benchmark related. label Dec 15, 2025
@Mab879 Mab879 self-assigned this Dec 15, 2025
@github-actions
Copy link

github-actions bot commented Dec 15, 2025

ATEX Test Results

Test artifacts have been submitted to Testing Farm.

Results: View Test Results
Workflow Run: View Workflow Details

This comment was automatically generated by the ATEX workflow.

@openshift-ci
Copy link

openshift-ci bot commented Dec 15, 2025

@vojtapolasek: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-aws-openshift-node-compliance 57e1a04 link true /test e2e-aws-openshift-node-compliance

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@Mab879 Mab879 merged commit c310b8c into ComplianceAsCode:master Dec 15, 2025
142 of 145 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Mab879 Mab879 Mab879 approved these changes

@matusmarhefka matusmarhefka Awaiting requested review from matusmarhefka matusmarhefka is a code owner

@jan-cerny jan-cerny Awaiting requested review from jan-cerny jan-cerny is a code owner

Assignees

@Mab879 Mab879

Labels

CIS CIS Benchmark related. New Rule Issues or pull requests related to new Rules.

Projects

None yet

Milestone

0.1.80

Development

Successfully merging this pull request may close these issues.

2 participants

@vojtapolasek @Mab879