SV-282631r1200873_rule
V-282631
SRG-OS-000480-GPOS-00227
TOSS-05-000111
CAT II
10
Configure TOSS 5 to disable core dump backtraces.
Add or modify the following line in /etc/systemd/coredump.conf:
ProcessSizeMax=0
Verify TOSS 5 disables core dump backtraces using the following command:
$ grep -i process /etc/systemd/coredump.conf
ProcessSizeMax=0
If the "ProcessSizeMax" item is missing, commented out, or the value is anything other than "0" and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.
V-282631
False
TOSS-05-000111
Verify TOSS 5 disables core dump backtraces using the following command:
$ grep -i process /etc/systemd/coredump.conf
ProcessSizeMax=0
If the "ProcessSizeMax" item is missing, commented out, or the value is anything other than "0" and the need for core dumps is not documented with the information system security officer (ISSO) as an operational requirement for all domains that have the "core" item assigned, this is a finding.
M
5738