SV-269181r1050063_rule
V-269181
SRG-OS-000480-GPOS-00227
ALMA-09-011570
CAT II
10
Configure the operating system to disable core dump backtraces.
Add or modify the following line in the [Coredump} section of /etc/systemd/coredump.conf:
ProcessSizeMax=0
Verify AlmaLinux OS 9 disables core dump backtraces by issuing the following command:
$ systemd-analyze cat-config systemd/coredump.conf | grep ProcessSizeMax
ProcessSizeMax=0
If the "ProcessSizeMax" item is missing, commented out, or the value is anything other than "0" and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.
V-269181
False
ALMA-09-011570
Verify AlmaLinux OS 9 disables core dump backtraces by issuing the following command:
$ systemd-analyze cat-config systemd/coredump.conf | grep ProcessSizeMax
ProcessSizeMax=0
If the "ProcessSizeMax" item is missing, commented out, or the value is anything other than "0" and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.
M
5664