Enable systemd-journald Service
An XCCDF Rule
Description
Thesystemd-journald
service is an essential component of
systemd.
The systemd-journald
service can be enabled with the following command:
$ sudo systemctl enable systemd-journald.service
Rationale
In the event of a system failure, Red Hat Enterprise Linux 10 must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to system processes.
- ID
- xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled
- Severity
- Medium
- References
- Updated
Remediation Templates
A Shell Script
# Remediation is applicable only in certain platforms
if rpm --quiet -q kernel; then
SYSTEMCTL_EXEC='/usr/bin/systemctl'
"$SYSTEMCTL_EXEC" unmask 'systemd-journald.service'
"$SYSTEMCTL_EXEC" start 'systemd-journald.service'
"$SYSTEMCTL_EXEC" enable 'systemd-journald.service'
A Puppet Snippet
include enable_systemd-journald
class enable_systemd-journald {
service {'systemd-journald':
enable => true,
ensure => 'running',
}
}
An Ansible Snippet
- name: Gather the package facts
package_facts:
manager: auto
tags:
- NIST-800-53-SC-24
- enable_strategy
script:kickstart
service enable systemd-journald
OS Build Blueprint
[customizations.services]
enabled = ["systemd-journald"]