mediumsystemverified ✓rollback-safe
Disable core dump backtraces
coredump-backtrace-disabled · RHEL ≥ 8 · 1 impl
Description
The systemd coredump service must be configured with ProcessSizeMax=0 so that core dump backtraces are not generated.
Rationale
Disabling core dump backtraces prevents sensitive in-memory data from being captured and retained when a process crashes.
Check → Remediate
Checkcommand
systemd-analyze cat-config systemd/coredump.conf 2>/dev/null | grep -E '^ProcessSizeMax=' | tail -1 | grep -q '^ProcessSizeMax=0$'
- expected_exit:
- 0
Remediateconfig_set_dropin
- dir:
- /etc/systemd/coredump.conf.d
- file:
- 00-kensa-coredump.conf
- key:
- ProcessSizeMax
- value:
- 0
- section:
- [Coredump]
Framework references
CIS
rhel8 1.5.9rhel10 1.5.9
STIG
V-281317 / RHEL-10-701150V-257812 / RHEL-09-213085V-230315 / RHEL-08-010675
NIST 800-53
CM-6
Live verification
rhel8:check
#coredump#memory#information-disclosure