The netconsole service must be disabled unless required.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-38672	RHEL-06-000289	SV-50473r2_rule		Low

Description
The "netconsole" service is not necessary unless there is a need to debug kernel panics, which is not common.

STIG	Date
Red Hat Enterprise Linux 6 Security Technical Implementation Guide	2014-06-10

Details

Check Text ( None )
None

Fix Text (F-43622r2_fix)
The "netconsole" service is responsible for loading the netconsole kernel module, which logs kernel printk messages over UDP to a syslog server. This allows debugging of problems where disk logging fails and serial consoles are impractical. The "netconsole" service can be disabled with the following commands: # chkconfig netconsole off # service netconsole stop