mediumservicesverified ✓rollback-safe

Ensure ABRT and crash reporting packages are not installed

pkg-abrt-absent · RHEL 8 · 2 impls

Description

The abrt, abrt-libs, abrt-addon-kerneloops, abrt-addon-ccpp, libreport, and related crash-reporting packages must not be installed. These packages collect and transmit crash data.

Rationale

Crash reporting tools can expose sensitive system information in core dumps and transmit it to external systems. RHEL 8 systems must not have ABRT or libreport packages installed.

Check → Remediate

Checkcommand

rpm -q abrt abrt-libs libreport 2>/dev/null | grep -v 'not installed' || true

Remediatepackage_absent

name:: abrt

Framework references

STIG

V-230488

NIST 800-53

CM-7SI-12

Live verification

rhel8:check

#package#abrt#libreport#attack-surface