Detections
Analytics

6.1.1.1.1 Ensure journald service is active

Information

Ensure that the systemd-journald service is enabled to allow capturing of logging events.

If the systemd-journald service is not enabled to start on boot, the system will not capture logging events.

Solution

Run the following commands to unmask, enable, and start systemd-journald.service

# systemctl unmask systemd-journald.service
# systemctl --now enable systemd-journald.service

See Also

https://workbench.cisecurity.org/benchmarks/26893

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-24, CCI|CCI-001665, CSCv7|6.2, CSCv7|6.3, Rule-ID|SV-257783r991562_rule, Rule-ID|SV-269428r1050311_rule, Rule-ID|SV-271739r1091929_rule

Plugin: Unix

Control ID: 382115da2b767aa71e80c8c1c7b332b88c43c23be8bb3f0468f77c5ccd89c457