Detections
Analytics

1.5.3 Ensure Automatic Error Reporting is not enabled

Information

The Apport Error Reporting Service automatically generates crash reports for debugging

Rationale:

Apport collects potentially sensitive data, such as core dumps, stack traces, and log files. They can contain passwords, credit card numbers, serial numbers, and other private material.

Solution

Edit /etc/default/apport and add or edit the enabled parameter to equal 0:

enabled=0

Run the following commands to stop and disable the apport service

# systemctl stop apport.service
# systemctl --now disable apport.service

-- OR --
Run the following command to remove the apport package:

# apt purge apport

Default Value:

enabled=1

See Also

https://workbench.cisecurity.org/files/4115

Item Details

References: CSCv7|9.2

Plugin: Unix

Control ID: 8635c4c2f8f75625eb441250c459a3c4e240805df4cfa84550ed33b414ee09ef