← All control domains
Logging: 1 control for Linux hardening
Pavois audits 1 control in the Logging hardening domain, across 9 systems and 3 standards (CIS, ANSSI BP-028, DISA STIG). Every control declares the evidence it gathers, its severity, its remediation and its standard references.
This domain is partially covered by Pavois today, see the Coverage page.
The domain in figures
| Controls | 1 |
| Severities | |
| Evidence gathered | |
| Standards | |
| Systems | Debian 12Debian 13FedoraRHEL 10 / Rocky 10 / AlmaLinux 10RHEL 8 / Rocky 8 / AlmaLinux 8RHEL 9 / Rocky 9 / AlmaLinux 9Ubuntu 22.04Ubuntu 24.04Ubuntu 26.04 |
| Coverage depth | partial |
What does Pavois check in this domain?
- effective runtime 1
- Checked against the resolved running state (e.g. sshd -T, sysctl, systemctl show), catches drop-ins and Includes a file read would miss. Caveat: runtime ≠ persistence; a value correct now may not survive a reboot.
Which standards does this domain cover?
One effective-configuration check serves as evidence for several standards at once. The references below are the ones the corpus actually carries, never a claimed equivalence. how to read a standard mapping.
- CIS
- 6.1.3.2, 6.2.2.2
- ANSSI BP-028
- R71
- DISA STIG
- UBTU-22-652010, UBTU-24-100200
The Logging control
| Ref | Rule | Sev. | OS | Standards |
|---|---|---|---|---|
| SOCLE-RUN-LOG-004 | A system logging daemon is active | medium | 9 |