Detections
Analytics
AIX7-00-003109 - In the event of a system failure, AIX must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to mission processes.
Information
Failure to a known state can address safety or security in accordance with the mission/business needs of the organization. Failure to a known secure state helps prevent a loss of confidentiality, integrity, or availability in the event of a failure of the information system or a component of the system.Preserving operating system state information helps to facilitate operating system restart and return to the operational mode of the organization with least disruption to mission/business processes.
Solution
The "sysdumpdev" command should be used to configure dump device.#sysdumpdev -p "Primary dump device"
#sysdumpdev -d <directory>
Note: The "-d <directory> " specifies the directory the device is copied to at boot time.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R2_STIG.zip
Item Details
Audit Name: DISA IBM AIX 7.x STIG v3r2
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-24, CAT|II, CCI|CCI-001665, Rule-ID|SV-215407r991562_rule, STIG-ID|AIX7-00-003109, STIG-Legacy|SV-101585, STIG-Legacy|V-91487, Vuln-ID|V-215407
Plugin: Unix
Control ID: 07e356eee9da1bd8d3bbbdbf5c78c42677dc0f628f1b26a876918c9623a146c4