CCE-90710-5Platform: rhel7,centos7 | Date: (C)2017-06-29 (M)2022-10-10 |
Disable System Statistics Reset Service (sysstat)
The 'sysstat' service resets various I/O and CPU
performance statistics to zero in order to begin counting from a fresh state
at boot time.
The 'sysstat' service can be disabled with the following command:
'$ sudo systemctl disable sysstat'
Parameter:
Technical Mechanism:
By default the 'sysstat' service merely runs a program at
boot to reset the statistics, which can be retrieved using programs such as
'sar' and 'sadc'. These may provide useful insight into system
operation, but unless used this service can be disabled.
Fix:
#
# Disable sysstat.service for all systemd targets
#
systemctl disable sysstat.service
#
# Stop sysstat.service if currently running
#
systemctl stop sysstat.service
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:31124 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:30401 |