Detections
Analytics

PHTN-40-000067 - The Photon operating system must restrict access to the kernel message buffer.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Restricting access to the kernel message buffer limits access only to root. This prevents attackers from gaining additional system information as a nonprivileged user.

Solution

Navigate to and open:

/etc/sysctl.d/zz-stig-hardening.conf

Add or update the following line:

kernel.dmesg_restrict = 1

At the command line, run the following command to load the new configuration:

# /sbin/sysctl --load /etc/sysctl.d/zz-stig-hardening.conf

Note: If the file zz-stig-hardening.conf does not exist, it must be created.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_8-0_Y24M08_STIG.zip

Item Details

References: CAT|II, CCI|CCI-001090, Rule-ID|SV-258828r958524_rule, STIG-ID|PHTN-40-000067, Vuln-ID|V-258828

Plugin: Unix

Control ID: 7de4ba8acad9af544ab9a9ac0371b89c7d133968a79890a2734b00007702bfc8