mediumservicesverified ✓rollback-safe
Disable kdump service
kdump-disabled · RHEL ≥ 8, UBUNTU ≥ 22 · 2 impls
Description
The kdump service must be disabled unless crash dump analysis is required. Kdump captures memory on system crash.
Rationale
Kernel crash dumps may contain sensitive data including credentials and should only be enabled when necessary.
Check → Remediate
Checkservice_state
- name:
- kdump
- active:
- false
- enabled:
- false
Remediateservice_masked
- name:
- kdump
Framework references
STIG
V-257818 / RHEL-09-213115V-230310V-281322 / RHEL-10-701200V-270746 / UBTU-24-600070V-260473 / UBTU-22-213015
NIST 800-53
CM-7SC-7
Live verification
rhel10:checkrhel8:checkrhel9:checkubuntu22:checkubuntu24:check
#service#systemd#kdump