From 716cccfe5a253be61e2b2f46b972ae2153a09ad2 Mon Sep 17 00:00:00 2001

From: Watson Sato <wsato@redhat.com>

Date: Tue, 4 Feb 2020 17:38:45 +0100

Subject: [PATCH] Add rules to configure rsyslog TLS

---

 rhel8/profiles/stig.profile | 6 ++++++

 1 file changed, 6 insertions(+)

diff --git a/rhel8/profiles/stig.profile b/rhel8/profiles/stig.profile

index d85e18e9d0..821cc26914 100644

--- a/rhel8/profiles/stig.profile

+++ b/rhel8/profiles/stig.profile

@@ -33,3 +33,9 @@ selections:

     - encrypt_partitions

     - sysctl_net_ipv4_tcp_syncookies

     - clean_components_post_updating

+

+    # Configure TLS for remote logging

+    - package_rsyslog_installed

+    - package_rsyslog-gnutls_installed

+    - rsyslog_remote_tls

+    - rsyslog_remote_tls_cacert