Detections
Analytics

1.79 ALMA-09-011680

Information

AlmaLinux OS 9 must disable the kernel.core_pattern.

GROUP ID: V-269182
RULE ID: SV-269182r1050064

A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.

Solution

Configure AlmaLinux OS 9 to disable storing core dumps.

Create a numbered *.conf file in /etc/sysctl.d/ with the following content:

kernel.core_pattern = |/bin/false

The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:

$ sysctl -system

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-269182r1050064_rule, STIG-ID|ALMA-09-011680, Vuln-ID|V-269182

Plugin: Unix

Control ID: 6266e3a2a53261f86891a929df56e81909058e351f1721864aeca95ee5efda53