Check: AZLX-23-000135
Amazon Linux 2023 STIG:
AZLX-23-000135
(in version v1 r1)
Title
Amazon Linux 2023 systemd-journald service must be enabled. (Cat II impact)
Discussion
Failure to a known state can address safety or security in accordance with the mission/business needs of the organization. Failure to a known secure state helps prevent a loss of confidentiality, integrity, or availability in the event of a failure of the information system or a component of the system. Preserving operating system state information helps to facilitate operating system restart and return to the operational mode of the organization with least disruption to mission/business processes.
Check Content
Verify Amazon Linux 2023 is configured so that "systemd-journald" is active with the following command: $ systemctl is-active systemd-journald active If the systemd-journald service is not active, this is a finding.
Fix Text
Configure Amazon Linux 2023 to enable the systemd-journald service with the following command: $ sudo systemctl enable --now systemd-journald
Additional Identifiers
Rule ID: SV-274000r1119988_rule
Vulnerability ID: V-274000
Group Title: SRG-OS-000269-GPOS-00103
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-001665 |
Preserve organization-defined system state information in the event of a system failure. |
Controls
| Number | Title |
|---|---|
| SC-24 |
Fail in Known State |