STIGQter STIGQter: STIG Summary: VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 01 Jul 2026:

The Photon operating system must restrict core dumps.

DISA Rule

SV-258904r1210423_rule

Vulnerability Number

V-258904

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

PHTN-40-000246

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Navigate to and open:

/etc/sysctl.d/zz-stig-hardening.conf

Add or update the following line:

fs.suid_dumpable = 0

Note: "0" is recommended for normal operation. If core dumps need to be captured for troubleshooting purposes, then "2" is also an acceptable value.

At the command line, run the following command to load the new configuration:

# /sbin/sysctl --load /etc/sysctl.d/zz-stig-hardening.conf

Note: If the file zz-stig-hardening.conf does not exist, it must be created.

Check Contents

At the command line, run the following command to verify core dumps are restricted:

# /sbin/sysctl fs.suid_dumpable

Example result:

fs.suid_dumpable = 0

If the "fs.suid_dumpable" kernel parameter is set to "1", this is a finding.

Vulnerability Number

V-258904

Documentable

False

Rule Version

PHTN-40-000246

Severity Override Guidance

At the command line, run the following command to verify core dumps are restricted:

# /sbin/sysctl fs.suid_dumpable

Example result:

fs.suid_dumpable = 0

If the "fs.suid_dumpable" kernel parameter is set to "1", this is a finding.

Check Content Reference

M

Target Key

5569