Vulnerability Discussion

rsyslogd is a system utility providing support for message logging. Support for both internet and Unix domain sockets enables this utility to support both local and remote logging. Couple this utility with "gnutls" (which is a secure communications library implementing the SSL, TLS, and DTLS protocols), to create a method to securely encrypt and offload auditing.

Check

Verify that AlmaLinux OS 9 has the rsyslog package installed with the following command:

$ dnf list --installed rsyslog

rsyslog.x86_64 8.2102.0-113.el9_2.1 @appstream

If the "rsyslog" package is not installed, this is a finding.

Fix

The rsyslog package can be installed with the following command:

$ dnf install rsyslog