Detections
Analytics

1.289 OL09-00-002370

Information

OL 9 must disable the use of user namespaces.

GROUP ID: V-271727
RULE ID: SV-271727r1091893

User namespaces are used primarily for Linux containers. The value "0" disallows the use of user namespaces.

Solution

Configure OL 9 to disable the use of user namespaces by adding the following line to a file, in the "/etc/sysctl.d" directory:

Note: User namespaces are used primarily for Linux containers. If containers are in use, this requirement is Not Applicable.

user.max_user_namespaces = 0

The system configuration files need to be reloaded for the changes to take effect. To reload the contents of the files, run the following command:

$ sudo sysctl --system

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-271727r1091893_rule, STIG-ID|OL09-00-002370, Vuln-ID|V-271727

Plugin: Unix

Control ID: 8a40873d74e4050ee2d6a5dec59a40c694c1a48113d56d2c254875a9c46c6764