The default syslog implementation should make syslog.service a symlink to itself, so that this socket activates the right actual syslog service. As rsyslog service is already disabled - also take care of the linked service.