Configure file name of core dumps
An XCCDF Rule
Description
To set the runtime status of the kernel.core_uses_pid
kernel parameter, run the following command:
$ sudo sysctl -w kernel.core_uses_pid=0To make sure that the setting is persistent, add the following line to a file in the directory
/etc/sysctl.d
: kernel.core_uses_pid = 0
Rationale
The default coredump filename is core
. By setting
core_uses_pid
to 1
, the coredump filename becomes
core.PID
. If core_pattern
does not include
%p
(default does not) and core_uses_pid
is set, then
.PID
will be appended to the filename.
When combined with kernel.core_pattern = ""
configuration, it
is ensured that no core dumps are generated and also no confusing error
messages are printed by a shell.
- ID
- xccdf_org.ssgproject.content_rule_sysctl_kernel_core_uses_pid
- Severity
- Medium
- References
- Updated