SV-271732r1155329_rule
V-271732
SRG-OS-000480-GPOS-00227
OL09-00-002384
CAT II
10
Configure the system to disable the systemd-coredump.socket with the following command:
$ sudo systemctl mask --now systemd-coredump.socket
Created symlink /etc/systemd/system/systemd-coredump.socket -> /dev/null
Reload the daemon for this change to take effect.
$ sudo systemctl daemon-reload
Note: If kernel dumps are disabled in accordance with OL09-00-002380, this requirement is not applicable.
Verify OL 9 is not configured to acquire, save, or process core dumps with the following command:
$ systemctl status systemd-coredump.socket
systemd-coredump.socket
Loaded: masked (Reason: Unit systemd-coredump.socket is masked.)
Active: inactive (dead)
If the "systemd-coredump.socket" is loaded and not masked and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.
V-271732
False
OL09-00-002384
Note: If kernel dumps are disabled in accordance with OL09-00-002380, this requirement is not applicable.
Verify OL 9 is not configured to acquire, save, or process core dumps with the following command:
$ systemctl status systemd-coredump.socket
systemd-coredump.socket
Loaded: masked (Reason: Unit systemd-coredump.socket is masked.)
Active: inactive (dead)
If the "systemd-coredump.socket" is loaded and not masked and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.
M
5680