Disable Control Group Config (cgconfig) Control groups allow an administrator to allocate system resources (such as CPU, memory, network bandwidth, etc) among a defined group (or groups) of processes executing on a system. The 'cgconfig' daemon starts at boot and establishes the predefined control groups. The 'cgconfig' service can be disabled with the following command: '$ sudo systemctl disable cgconfig' Unless control groups are used to manage system resources, running the cgconfig service is not necessary. Fix: # # Disable cgconfig.service for all systemd targets # systemctl disable cgconfig.service # # Stop cgconfig.service if currently running # systemctl stop cgconfig.service oval:org.secpod.oval:def:48312 oval:org.secpod.oval:def:48776 oval:org.secpod.oval:def:48312 SCAP Repo OVAL Definition 2018-11-08