Title

RHEL 9 systemd-journald service must be enabled. (Cat II impact)

Discussion

In the event of a system failure, RHEL 9 must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to system processes.

Check Content

Verify that "systemd-journald" is active with the following command: $ systemctl is-active systemd-journald active If the systemd-journald service is not active, this is a finding.

Fix Text

To enable the systemd-journald service, run the following command: $ sudo systemctl enable --now systemd-journald

Additional Identifiers

Rule ID: SV-257783r925336_rule

Vulnerability ID: V-257783

Group Title: SRG-OS-000269-GPOS-00103

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.