Detections
Analytics

SLEM-05-213015 - SLEM 5 kernel core dumps must be disabled unless needed.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Kernel core dumps may contain the full contents of system memory at the time of the crash. Kernel core dumps may consume a considerable amount of disk space and may result in denial of service (DoS) by exhausting the available space on the target file system partition.

Solution

If SLEM 5 kernel core dumps are not required, disable the "kdump" service with the following command:

 > sudo systemctl disable kdump.service

If kernel core dumps are required, document the need with the ISSO.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLEM_5_V1R3_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000366, Rule-ID|SV-261270r996860_rule, STIG-ID|SLEM-05-213015, Vuln-ID|V-261270

Plugin: Unix

Control ID: 13395820307b061a3f7668d74f3752ce1940db5518d8eb0cd3ac0738f6e92e4a