← Rules Catalog
mediumservicesverified rollback-safe

Disable kdump service

kdump-disabled · RHEL ≥ 8, UBUNTU ≥ 22 · 2 impls

Description

The kdump service must be disabled unless crash dump analysis is required. Kdump captures memory on system crash.

Rationale

Kernel crash dumps may contain sensitive data including credentials and should only be enabled when necessary.

Check → Remediate

Checkservice_state
name:
kdump
active:
false
enabled:
false
Remediateservice_masked
name:
kdump

Framework references

STIG

V-257818 / RHEL-09-213115V-230310V-281322 / RHEL-10-701200V-270746 / UBTU-24-600070V-260473 / UBTU-22-213015

NIST 800-53

CM-7SC-7

Live verification

rhel10:checkrhel8:checkrhel9:checkubuntu22:checkubuntu24:check
#service#systemd#kdump