Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
직접 명령은 검토 Prompt를 거치지 않습니다. 실행하기 전에 소스를 확인하세요.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-ubuntu1204-v110-4-1명령은 한 줄로 유지됩니다. 복사하기 전에 가로로 스크롤해 전체 내용을 확인하세요.
로컬 사본을 원하시나요? SkillsMP에서 현재 제공할 수 있는 파일을 다운로드하세요.
SOC 직업 분류 기준
SKILL.md 표시 중
| name | cis-ubuntu1204-v110-4-1 |
| description | Restrict Core Dumps |
| category | cis-os-hardening |
| version | 1.1.0 |
| author | cyberstrike-official |
| tags | ["cis","ubuntu",12.04,"linux","process-hardening","core-dumps","security-limits","sysctl"] |
| cis_id | 4.1 |
| cis_benchmark | CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0 |
| tech_stack |
| ["ubuntu","linux"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
A core dump is the memory of an executable program. It is generally used to determine why a program aborted. It can also be used to glean confidential information from a core file. The system provides the ability to set a soft limit for core dumps, but this can be overridden by the user.
Setting a hard limit on core dumps prevents users from overriding the soft variable. If core dumps are required, consider setting limits for user groups (see limits.conf(5)). In addition, setting the fs.suid_dumpable variable to 0 will prevent setuid programs from dumping core. The apport service if active will override the fs.suid_dumpable variable setting and automatically create core dump reports. The whoopsie service monitors apport core dump reports and transmits them to Canonical.
Perform the following to determine if core dumps are restricted:
grep "hard core" /etc/security/limits.conf
sysctl fs.suid_dumpable
Ensure no start conditions are listed for the apport or whoopsie services:
initctl show-config apport apport
initctl show-config whoopsie whoopsie
The first command should return: * hard core 0
The second command should return: fs.suid_dumpable = 0
The apport and whoopsie services should have no start conditions or be disabled.
Add the following line to the /etc/security/limits.conf file:
* hard core 0
Add the following line to the /etc/sysctl.conf file:
fs.suid_dumpable = 0
Uninstall the apport and whoopsie packages or comment out any start lines in /etc/init/apport.conf and /etc/init/whoopsie.conf files:
#start on runlevel [2345]
By default, core dumps are enabled and apport may be active on Ubuntu 12.04.
Level 1 - Scored