Vulnerability Discussion

In the event of a system failure, OL 9 must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to system processes.

Check

Verify that OL 9 systemd-journald is active with the following command:

$ systemctl is-active systemd-journald
active

If the systemd-journald service is not active, this is a finding.

Fix

Configure OL 9 to enable the systemd-journald service with the following command:

$ sudo systemctl enable --now systemd-journald