GEN003522 - The kernel core dump data directory must have mode 0700 or less permissive.

Information

Kernel core dumps may contain the full contents of system memory at the time of the crash. As the system memory may contain sensitive information, it must be protected accordingly. If the mode of the kernel core dump data directory is more permissive than 0700, unauthorized users may be able to view or to modify kernel core dump data files.

Solution

Set the permissions on the kernel core dump data directory to 0700.

# chmod 0700 <kernel core dump data directory>

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_5_V2R1_STIG.zip

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-6, 800-53|CM-5(6), CAT|III, CCI|CCI-000225, CCI|CCI-001499, Rule-ID|SV-218475r603259_rule, STIG-ID|GEN003522, STIG-Legacy|SV-64433, STIG-Legacy|V-22406, Vuln-ID|V-218475

Plugin: Unix

Control ID: 6b86d219366cd2f5758af876bfde73ca4e36c70977ed2bb611f4d2fd9937fa8e