Enable checks on scatter-gather (SG) table operations
An XCCDF Rule
Description
Scatter-gather tables are mechanism used for high performance I/O on DMA devices. Enable this to turn on checks on scatter-gather tables. The configuration that was used to build kernel is available at/boot/config-*.
To check the configuration value for CONFIG_DEBUG_SG, run the following command:
grep CONFIG_DEBUG_SG /boot/config-*
For each kernel installed, a line with value "y" should be returned.
warning alert: Warning
There is no remediation for this besides re-compiling the kernel with the appropriate value for the config.
Rationale
This can help find problems with drivers that do not properly initialize their SG tables.
- ID
- xccdf_org.ssgproject.content_rule_kernel_config_debug_sg
- Severity
- Low
- References
- Updated