TMA-MONGODB-5.4
Ensure that new entries are appended to the end of the log file
RendahLevel 2Otomatismongodb
Deskripsi
By default, new log entries will overwrite old entries after a restart of the mongod or Mongols service. Enabling the systemLog.logAppend setting causes new entries to be appended to the end of the log file rather than overwriting the existing content of the log when the mongos or mongod instance restarts. Checks the YAML config file /etc/mongod.conf (SKIP when it does not exist).
Cara pemeriksaan
Metode audit: Pola file
- File
/etc/mongod.conf- Pola
(?m)^[ \t]*logAppend:[ \t]*['\x22]?true\b
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Set systemLog.logAppend: true in /etc/mongod.conf and restart mongod.
Properti
- Sistem operasi
- Apa saja
- Tag
- mongodblogging
- Referensi
- CIS MongoDB 8 Benchmark v2.0.0 - 5.4 Ensure that new entries are appended to the end of the log file
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
shell
tmaegis scan --target mongodb --level 2