documentation_complete: true

{{% if 'ubuntu' in product -%}}
{{% set kdump_service = 'kdump-tools' -%}}
{{% else -%}}
{{% set kdump_service = 'kdump' -%}}
{{% endif -%}}

title: 'Disable KDump Kernel Crash Analyzer (kdump)'

description: |-
    The <tt>{{{ kdump_service }}}</tt> service provides a kernel crash dump analyzer. It uses the <tt>kexec</tt>
    system call to boot a secondary kernel ("capture" kernel) following a system
    crash, which can load information from the crashed kernel for analysis.
    {{{ describe_service_disable(service=kdump_service) }}}

rationale: |-
    Kernel core dumps may contain the full contents of system memory at the
    time of the crash. Kernel core dumps consume a considerable amount of disk
    space and may result in denial of service by exhausting the available space
    on the target file system partition. Unless the system is used for kernel
    development or testing, there is little need to run the kdump service.

severity: medium

identifiers:
    cce@rhel8: CCE-80878-2
    cce@rhel9: CCE-84232-8
    cce@rhel10: CCE-88407-2
    cce@sle12: CCE-83105-7
    cce@sle15: CCE-85638-5
    cce@sle16: CCE-96052-6
    cce@slmicro5: CCE-93773-0
    cce@slmicro6: CCE-95065-9 

references:
    cis-csc: 11,12,14,15,3,8,9
    cobit5: APO13.01,BAI10.01,BAI10.02,BAI10.03,BAI10.05,DSS01.04,DSS05.02,DSS05.03,DSS05.05,DSS06.06
    hipaa: 164.308(a)(1)(ii)(D),164.308(a)(3),164.308(a)(4),164.310(b),164.310(c),164.312(a),164.312(e)
    isa-62443-2009: 4.3.3.5.1,4.3.3.5.2,4.3.3.5.3,4.3.3.5.4,4.3.3.5.5,4.3.3.5.6,4.3.3.5.7,4.3.3.5.8,4.3.3.6.1,4.3.3.6.2,4.3.3.6.3,4.3.3.6.4,4.3.3.6.5,4.3.3.6.6,4.3.3.6.7,4.3.3.6.8,4.3.3.6.9,4.3.3.7.1,4.3.3.7.2,4.3.3.7.3,4.3.3.7.4,4.3.4.3.2,4.3.4.3.3
    isa-62443-2013: 'SR 1.1,SR 1.10,SR 1.11,SR 1.12,SR 1.13,SR 1.2,SR 1.3,SR 1.4,SR 1.5,SR 1.6,SR 1.7,SR 1.8,SR 1.9,SR 2.1,SR 2.2,SR 2.3,SR 2.4,SR 2.5,SR 2.6,SR 2.7,SR 3.1,SR 3.5,SR 3.8,SR 4.1,SR 4.3,SR 5.1,SR 5.2,SR 5.3,SR 7.1,SR 7.6'
    iso27001-2013: A.11.2.6,A.12.1.2,A.12.5.1,A.12.6.2,A.13.1.1,A.13.2.1,A.14.1.3,A.14.2.2,A.14.2.3,A.14.2.4,A.6.2.1,A.6.2.2,A.9.1.2
    nist: CM-7(a),CM-7(b),CM-6(a)
    nist-csf: PR.AC-3,PR.IP-1,PR.PT-3,PR.PT-4
    ospp: FMT_SMF_EXT.1.1
    srg: SRG-OS-000269-GPOS-00103,SRG-OS-000480-GPOS-00227
    stigid@ol7: OL07-00-021300
    stigid@ol8: OL08-00-010670
    stigid@sle12: SLES-12-010840
    stigid@sle15: SLES-15-040190

ocil_clause: |-
    {{{ ocil_clause_service_disabled(service=kdump_service) }}}

ocil: |-
    {{{ ocil_service_disabled(service=kdump_service) }}}

fixtext: '{{{ fixtext_service_disabled(kdump_service) }}}'

srg_requirement: '{{{ srg_requirement_service_disabled(kdump_service) }}}'

platform: system_with_kernel

template:
    name: service_disabled
    vars:
        servicename: "{{{ kdump_service }}}"
        packagename: kexec-tools
