MEDIUM M26: Systemd Hardening P3
Overview
Disables dangerous systemd behaviors: prevents Ctrl-Alt-Del from rebooting nodes (both single-press and burst), disables core dump generation and storage to prevent information leakage.
Profile: NIST 800-53 Moderate (rhcos4-moderate)
Compliance Checks
| Check | Description |
|---|---|
Ctrl-Alt-Del burst action |
Disable CtrlAltDelBurstAction |
Ctrl-Alt-Del reboot |
Disable Ctrl-Alt-Del reboot target |
Coredump backtraces |
Disable coredump backtrace generation |
Coredump storage |
Disable coredump storage |
User coredumps |
Disable user coredumps via limits.conf |
Verification
oc debug node/<node> -- chroot /host systemctl status ctrl-alt-del.target