[Open-scap] syslog-ng setting issue in debian 8

[Dhanushka Parakrama]

Hi  Team

We have ran the scan for debian 8 using below command

*oscap  xccdf eval   --profile
xccdf_org.ssgproject.content_profile_anssi_np_nt28_high --report
report.html  ssg-debian8-ds.xml*

Got alerts as below ,
==============
[image: image.png]


To Fixed it we ran the below commands as suggested by the report

* apt-get install syslog-ng-core

* systemctl status syslog-ng

● syslog-ng.service - System Logger Daemon
   Loaded: loaded (/lib/systemd/system/syslog-ng.service; enabled)
   Active: active (running) since Tue 2018-08-28 15:04:28 IST; 23h ago
     Docs: man:syslog-ng(8)
  Process: 16275 ExecReload=/bin/kill -HUP $MAINPID (code=exited,
status=0/SUCCESS)
 Main PID: 14555 (syslog-ng)
   CGroup: /system.slice/syslog-ng.service
           └─14555 /usr/sbin/syslog-ng -F

Aug 28 15:04:28 oscapserver systemd[1]: Starting System Logger Daemon...
Aug 28 15:04:28 oscapserver systemd[1]: Started System Logger Daemon.
Aug 29 06:25:03 oscapserver systemd[1]: Reloading System Logger Daemon.
Aug 29 06:25:03 oscapserver systemd[1]: Reloaded System Logger Daemon.


But even after we ran the scan after fixing it  Report still shows as

Ensure syslog-ng is installed -> FAILED
Ensure Syslog-ng Service ->  FAILED


Is there any reason for that ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/open-scap-list/attachments/20180829/ba92467e/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 15181 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/open-scap-list/attachments/20180829/ba92467e/attachment.png>