Skip to content
ATO Pathways
  Log In

Disallow kernel profiling by unprivileged users

An XCCDF Rule

Description

To set the runtime status of the kernel.perf_event_paranoid kernel parameter, run the following command: 

$ sudo sysctl -w kernel.perf_event_paranoid=2
To make sure that the setting is persistent, add the following line to a file in the directory /etc/sysctl.d: 
kernel.perf_event_paranoid = 2

Rationale

Kernel profiling can reveal sensitive information about kernel behaviour.

ID
xccdf_org.ssgproject.content_rule_sysctl_kernel_perf_event_paranoid
Severity
Low
References
Updated



Remediation - Kubernetes Patch

---
apiVersion: machineconfiguration.openshift.io/v1
kind: MachineConfig
spec:
  config:
    ignition: