Restricted Shell Configuration

Classification

RuleName

RuleType

CommonEvent

Classification

Chroot Configuration Failure

Sub Rule

Failed Configuration

Other Audit Failure

Log Facility Set

Sub Rule

Log Collector Set

Information

Restricted Shell Configuration

Base Rule

Configuration Modified : System

Configuration

Umask Set

Sub Rule

Configuration Modified : Security

Configuration

Chroot Set For All Users

Sub Rule

Configuration Modified : Security

Configuration

SFTP Allowed

Sub Rule

Configuration Enabled : Security

Configuration

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<object>

Text\String

N/A

<group>

Text\String

N/A

<tag1>

Text\String