>From 0ef26d49f9028ae10bd2d22a4ac2eb4a5b5b089f Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn@redhat.com>
Date: Mon, 23 Jul 2012 22:43:38 -0400
Subject: [PATCH 15/16] Mapped CCI-001352 to rsyslog_send_messages_to_logserver

Per feedback from DISA FSO, rsyslog_send_messages_to_logserver can be used to meet 1352 by getting the audit records to a centralized syslog
---
 RHEL6/input/system/logging.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/system/logging.xml b/RHEL6/input/system/logging.xml
index da2aa5d..ea30340 100644
--- a/RHEL6/input/system/logging.xml
+++ b/RHEL6/input/system/logging.xml
@@ -233,7 +233,7 @@ place to view the status of multiple hosts within the enterprise.
 </rationale>
 <ident cce="17248-6" />
 <oval id="rsyslog_remote_loghost" />
-<ref nist="AU-2, AU-9" disa="1348, 136" />
+<ref nist="AU-2, AU-9" disa="1348, 136, 1352" />
 </Rule>
 </Group>
 
-- 
1.7.1