Disable hibernation
An XCCDF Rule
Description
Enable the suspend to disk (STD) functionality, which is usually called "hibernation" in user
interfaces. STD checkpoints the system and powers it off; and restores that checkpoint on
reboot.
The configuration that was used to build kernel is available at /boot/config-*.
To check the configuration value for CONFIG_HIBERNATION, run the following command:
grep CONFIG_HIBERNATION /boot/config-*
Configs with value 'n' are not explicitly set in the file, so either commented lines or no
lines should be returned.
warning alert: Warning
There is no remediation for this besides re-compiling the kernel with the appropriate value for the config.
Rationale
Suspending to disk allows one to replace the running kernel.
- ID
- xccdf_org.ssgproject.content_rule_kernel_config_hibernation
- Severity
- Medium
- References
- Updated