The rsyslog service should be enabled or disabled as appropriate. enabled / disabled via chkconfig Section: 2.6.1.2.2 - Ensure the rsyslog Service is Activated oval:gov.nist.usgcb.rhel:def:20148 Guide to the Secure Configuration of Red Hat Enterprise Linux 5 NSA 2010-09-14 Revision 4 Prose(pdf) SCAP Repo OVAL Definition 2012-08-24