RHEL 10 must enable the systemd-journald service.

STIG ID: RHEL-10-500000  |  SRG: SRG-OS-000269-GPOS-00103 |  Severity: medium (CAT II)  |  CCI: CCI-001665 |  Vulnerability Id: V-281096

Vulnerability Discussion

In the event of a system failure, RHEL 10 must preserve any information necessary to determine cause of failure and return to operations with least disruption to system processes.

Check

Verify RHEL 10 enables the systemd-journald service with the following command:

$ systemctl is-active systemd-journald
active

If the systemd-journald service is not active, this is a finding.

Fix

Configure RHEL 10 to enable the systemd-journald service.

To enable the systemd-journald service, run the following command:

$ sudo systemctl enable --now systemd-journald
This website is not created by, run, approved, or endorsed by the U.S. Department of Defense. Use at your own risk. This website is created by open-source software.