SV-230314r1134881_rule
V-230314
SRG-OS-000480-GPOS-00227
RHEL-08-010674
CAT II
10
Configure the operating system to disable storing core dumps for all users.
Add or modify the following line in /etc/systemd/coredump.conf:
Storage=none
Note: If kernel dumps are disabled in accordance with RHEL-08-010671, this requirement is not applicable.
Verify the operating system disables storing core dumps for all users by issuing the following command:
$ sudo grep -i storage /etc/systemd/coredump.conf
Storage=none
If the "Storage" item is missing or commented out, or the value is anything other than "none", and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.
V-230314
False
RHEL-08-010674
Note: If kernel dumps are disabled in accordance with RHEL-08-010671, this requirement is not applicable.
Verify the operating system disables storing core dumps for all users by issuing the following command:
$ sudo grep -i storage /etc/systemd/coredump.conf
Storage=none
If the "Storage" item is missing or commented out, or the value is anything other than "none", and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.
M
2921