STIGQter: STIG Summary: Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide Version: 1 Release: 7 Benchmark Date: 01 Jul 2026:

The kdump service on AlmaLinux OS 9 must be disabled.

DISA Rule

SV-269278r1050160_rule

Vulnerability Number

V-269278

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

ALMA-09-022350

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Disable the kdump service with the following command:

$ systemctl mask --now kdump

Check Contents

Verify that the kdump service is disabled in system boot configuration with the following command:

$ systemctl is-enabled kdump

masked

Verify that the kdump service is not active (i.e., not running) through current runtime configuration with the following command:

$ systemctl is-active kdump

inactive

Verify that the kdump service is masked with the following command:

$ systemctl show kdump | grep "LoadState\|UnitFileState"

LoadState=masked
UnitFileState=masked

If the "kdump" service is loaded or active, and is not masked, this is a finding.

Vulnerability Number

V-269278

Documentable

False

Rule Version

ALMA-09-022350

Severity Override Guidance

Verify that the kdump service is disabled in system boot configuration with the following command:

$ systemctl is-enabled kdump

masked

Verify that the kdump service is not active (i.e., not running) through current runtime configuration with the following command:

$ systemctl is-active kdump

inactive

Verify that the kdump service is masked with the following command:

$ systemctl show kdump | grep "LoadState\|UnitFileState"

LoadState=masked
UnitFileState=masked

If the "kdump" service is loaded or active, and is not masked, this is a finding.

Check Content Reference

M

Target Key

5664