SV-248633r1156672_rule
V-248633
SRG-OS-000480-GPOS-00227
OL08-00-010675
CAT II
10
Configure OL 8 to disable core dump backtraces.
Add or modify the following line in "/etc/systemd/coredump.conf":
ProcessSizeMax=0
Note: If kernel dumps are disabled in accordance with OL08-00-010671, this requirement is not applicable.
Verify OL 8 disables core dump backtraces by issuing the following command:
$ sudo grep -i ProcessSizeMax /etc/systemd/coredump.conf
ProcessSizeMax=0
If the "ProcessSizeMax" item is missing or commented out or the value is anything other than "0", and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.
V-248633
False
OL08-00-010675
Note: If kernel dumps are disabled in accordance with OL08-00-010671, this requirement is not applicable.
Verify OL 8 disables core dump backtraces by issuing the following command:
$ sudo grep -i ProcessSizeMax /etc/systemd/coredump.conf
ProcessSizeMax=0
If the "ProcessSizeMax" item is missing or commented out or the value is anything other than "0", and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.
M
5416