CCE-92125-4Platform: Amazon Linux | Date: (C)2018-10-29 (M)2022-10-10 |
Disable Control Group Config (cgconfig)
Control groups allow an administrator to allocate system resources (such as CPU,
memory, network bandwidth, etc) among a defined group (or groups) of processes executing on
a system. The 'cgconfig' daemon starts at boot and establishes the predefined control groups.
The 'cgconfig' service can be disabled with the following command:
'$ sudo systemctl disable cgconfig'
Parameter:
Technical Mechanism:
Unless control groups are used to manage system resources, running the cgconfig
service is not necessary.
Fix:
#
# Disable cgconfig.service for all systemd targets
#
systemctl disable cgconfig.service
#
# Stop cgconfig.service if currently running
#
systemctl stop cgconfig.service
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:48312 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:48776 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:48312 |