Detections
Analytics

1.5.5 Ensure Automatic Error Reporting is not enabled

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The Apport Error Reporting Service automatically generates crash reports for debugging

Apport collects potentially sensitive data, such as core dumps, stack traces, and log files. They can contain passwords, credit card numbers, serial numbers, and other private material.

Solution

Edit /etc/default/apport and add or edit the enabled parameter to equal 0 :

 enabled=0

Run the following commands to stop and mask the apport service

 # systemctl stop apport.service
 # systemctl mask apport.service

 - OR -

Run the following command to remove the apport package:

 # apt purge apport

See Also

https://workbench.cisecurity.org/benchmarks/18959

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: b4f7c72f2aa122d9563bb9b312d60d97044394f524e0c652c72799d497a5e4b3