STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SLEM 5 kernel core dumps must be disabled unless needed.

DISA Rule

SV-261270r996860_rule

Vulnerability Number

V-261270

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

SLEM-05-213015

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

If SLEM 5 kernel core dumps are not required, disable the "kdump" service with the following command:

> sudo systemctl disable kdump.service

If kernel core dumps are required, document the need with the ISSO.

Check Contents

Verify that SLEM 5 kernel core dumps are disabled unless needed with the following command:

> systemctl status kdump.service
kdump.service - Load kdump kernel and initrd
Loaded: loaded (/usr/lib/systemd/system/kdump.service; disabled; vendor preset: disabled)
Active: inactive (dead)

If "kdump.service" is active, ask the system administrator if the use of the service is required and documented with the information system security officer (ISSO).

If the service is active and is not documented, this is a finding.

Vulnerability Number

V-261270

Documentable

False

Rule Version

SLEM-05-213015

Severity Override Guidance

Verify that SLEM 5 kernel core dumps are disabled unless needed with the following command:

> systemctl status kdump.service
kdump.service - Load kdump kernel and initrd
Loaded: loaded (/usr/lib/systemd/system/kdump.service; disabled; vendor preset: disabled)
Active: inactive (dead)

If "kdump.service" is active, ask the system administrator if the use of the service is required and documented with the information system security officer (ISSO).

If the service is active and is not documented, this is a finding.

Check Content Reference

M

Target Key

5596