SLES-15-010375 - The SUSE operating system must restrict access to the kernel message buffer

Information

Restricting access to the kernel message buffer limits access only to root. This prevents attackers from gaining additional system information as a nonprivileged user.

Solution

Configure the operating system to restrict access to the kernel message buffer.

Set the system to the required kernel parameter by adding or modifying the following line in /etc/sysctl.conf or a config file in the /etc/sysctl.d/ directory:

kernel.dmesg_restrict = 1

Remove any configurations that conflict with the above from the following locations:
/run/sysctl.d/
/etc/sysctl.d/
/usr/local/lib/sysctl.d/
/usr/lib/sysctl.d/
/lib/sysctl.d/
/etc/sysctl.conf

Reload settings from all system configuration files with the following command:

$ sudo sysctl --system

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLES_15_V1R10_STIG.zip

Item Details

References: CAT|III, CCI|CCI-001090, Rule-ID|SV-255921r880964_rule, STIG-ID|SLES-15-010375, Vuln-ID|V-255921

Plugin: Unix

Control ID: 5895c2750fb88d40594f89333187385ca18e6a70307c3c0cd26ec5c6ee4840d6