Skip to content

6.1.1.1 Ensure journald service is enabled and active

Audit#

Run the following command to verify systemd-journald is enabled:

# systemctl is-enabled systemd-journald.service
static

Note: By default the systemd-journald service does not have an [Install] section and thus cannot be enabled / disabled. It is meant to be referenced as Requires or Wants by other unit files. As such, if the status of systemd-journald is not static, investigate why

Run the following command to verify systemd-journald is active:

# systemctl is-active systemd-journald.service
active

Remediation#

Run the following commands to unmask and start systemd-journald.service

# systemctl unmask systemd-journald.service
# systemctl start systemd-journald.service