STIGQter: STIG Summary: Oracle Linux 9 Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

OL 9 must be configured so that the kdump service is disabled.

DISA Rule

SV-271733r1092598_rule

Vulnerability Number

V-271733

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

OL09-00-002385

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure OL 9 to disable and mask the kdump service.

To disable the kdump service, run the following command:

$ sudo systemctl disable --now kdump

To mask the kdump service, run the following command:

$ sudo systemctl mask --now kdump

Check Contents

Verify that OL 9 kdump service is disabled or masked in system boot configuration with the following command:

$ systemctl is-enabled kdump
disabled (or masked)

Verify that the kdump service is not active (i.e., not running) through current runtime configuration with the following command:

$ systemctl is-active kdump
inactive

Verify that the kdump service is masked with the following command:

$ systemctl show kdump | grep "LoadState\|UnitFileState"
LoadState=masked
UnitFileState=masked

If the "kdump" service is loaded or active, and is not masked, this is a finding.

Vulnerability Number

V-271733

Documentable

False

Rule Version

OL09-00-002385

Severity Override Guidance

Verify that OL 9 kdump service is disabled or masked in system boot configuration with the following command:

$ systemctl is-enabled kdump
disabled (or masked)

Verify that the kdump service is not active (i.e., not running) through current runtime configuration with the following command:

$ systemctl is-active kdump
inactive

Verify that the kdump service is masked with the following command:

$ systemctl show kdump | grep "LoadState\|UnitFileState"
LoadState=masked
UnitFileState=masked

If the "kdump" service is loaded or active, and is not masked, this is a finding.

Check Content Reference

M

Target Key

5680