Detections
Analytics

OL07-00-010375 - The Oracle Linux operating system must restrict access to the kernel message buffer.

Information

Restricting access to the kernel message buffer limits access only to root. This prevents attackers from gaining additional system information as a nonprivileged user.

Solution

Configure the operating system to restrict access to the kernel message buffer.

Set the system to the required kernel parameter by adding or modifying the following line in /etc/sysctl.conf or a config file in the /etc/sysctl.d/ directory:

 kernel.dmesg_restrict = 1

Remove any configurations that conflict with the above from the following locations:
 /run/sysctl.d/
 /etc/sysctl.d/
 /usr/local/lib/sysctl.d/
 /usr/lib/sysctl.d/
 /lib/sysctl.d/
 /etc/sysctl.conf

Reload settings from all system configuration files with the following command:

 $ sudo sysctl --system

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_7_V3R5_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-4, CAT|III, CCI|CCI-001090, Rule-ID|SV-255901r1137695_rule, STIG-ID|OL07-00-010375, Vuln-ID|V-255901

Plugin: Unix

Control ID: cbcd011c1900250c98760397616678a1aee92150f5c559505092c482b15e6c3b