Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-38672 | RHEL-06-000289 | SV-50473r2_rule | Low |
Description |
---|
The "netconsole" service is not necessary unless there is a need to debug kernel panics, which is not common. |
STIG | Date |
---|---|
Red Hat Enterprise Linux 6 Security Technical Implementation Guide | 2017-04-28 |
Check Text ( None ) |
---|
None |
Fix Text (F-43622r2_fix) |
---|
The "netconsole" service is responsible for loading the netconsole kernel module, which logs kernel printk messages over UDP to a syslog server. This allows debugging of problems where disk logging fails and serial consoles are impractical. The "netconsole" service can be disabled with the following commands: # chkconfig netconsole off # service netconsole stop |