Skip to content

Enable systemd-journald Service

An XCCDF Rule

Description

The systemd-journald service is an essential component of systemd. The systemd-journald service can be enabled with the following command:

$ sudo systemctl enable systemd-journald.service

Rationale

In the event of a system failure, SUSE Linux Enterprise 12 must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to system processes.

ID
xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled
Severity
Medium
References
Updated



Remediation - Puppet

include enable_systemd-journald

class enable_systemd-journald {
  service {'systemd-journald':
    enable => true,
    ensure => 'running',

Remediation - Ansible

- name: Gather the package facts
  package_facts:
    manager: auto
  tags:
  - NIST-800-53-SC-24
  - enable_strategy

Remediation - OS Build Blueprint


[customizations.services]
enabled = ["systemd-journald"]

Remediation - Shell Script

# Remediation is applicable only in certain platforms
if rpm --quiet -q kernel-default; then

SYSTEMCTL_EXEC='/usr/bin/systemctl'
"$SYSTEMCTL_EXEC" unmask 'systemd-journald.service'
"$SYSTEMCTL_EXEC" start 'systemd-journald.service'