The Photon operating system must restrict core dumps.
An XCCDF Rule
Description
By enabling the fs.suid_dumpable kernel parameter, core dumps are not generated for setuid or otherwise protected/tainted binaries. This prevents users from potentially accessing core dumps with privileged information they would otherwise not have access to read.
- ID
- SV-258904r933773_rule
- Version
- PHTN-40-000246
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Navigate to and open:
/etc/sysctl.d/zz-stig-hardening.conf
Add or update the following line: