{"description": "The <tt>systemd-journald</tt> service is an essential component of\nsystemd.\n\nThe <code>systemd-journald</code> service can be enabled with the following command:\n<pre>$ sudo systemctl enable systemd-journald.service</pre>", "rationale": "In the event of a system failure, Ubuntu 22.04 must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to system processes.", "severity": "medium", "references": {"nist": ["SC-24"], "srg": ["SRG-OS-000269-GPOS-00103"], "cis": ["6.2.1.1.1"]}, "control_references": {"cis": ["6.2.1.1.1"]}, "components": [], "identifiers": {}, "ocil_clause": "the systemd-journald service is not running", "ocil": "\n\nRun the following command to determine the current status of the\n<code>systemd-journald</code> service:\n<pre>$ sudo systemctl is-active systemd-journald</pre>\nIf the service is running, it should return the following: <pre>active</pre>", "oval_external_content": null, "fixtext": "To enable the systemd-journald service run the following command:\n\n$ sudo systemctl enable --now systemd-journald", "checktext": "", "vuldiscussion": "", "srg_requirement": "The Ubuntu 22.04 service systemd-journald must be enabled.", "warnings": [], "conflicts": [], "requires": [], "policy_specific_content": {"stig": {"srg_requirement": "Ubuntu 22.04 systemd-journald service must be enabled.", "vuldiscussion": "In the event of a system failure, Ubuntu 22.04 must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to system processes.", "checktext": "Verify that \"systemd-journald\" is active with the following command:\n\n$ systemctl is-active systemd-journald\n\nactive\n\nIf the systemd-journald service is not active, this is a finding.", "fixtext": "To enable the systemd-journald service, run the following command:\n\n$ sudo systemctl enable --now systemd-journald"}}, "platform": null, "platforms": [], "sce_metadata": {"check-import": "stdout", "platform": ["multi_platform_all"], "environment": "any", "filename": "service_systemd-journald_enabled.sh", "relative_path": "ubuntu2204/checks/sce/service_systemd-journald_enabled.sh"}, "inherited_platforms": ["system_with_kernel"], "cpe_platform_names": [], "inherited_cpe_platform_names": ["system_with_kernel"], "bash_conditional": null, "fixes": {}, "title": "Enable systemd-journald Service", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/system/logging/journald/service_systemd-journald_enabled/rule.yml", "template": {"name": "service_enabled", "vars": {"servicename": "systemd-journald", "packagename": "systemd"}, "backends": {}}}