V-215396

Discussion

A core dump includes a memory image taken at the time the operating system terminates an application. The memory image could contain sensitive data and is generally useful only for developers trying to debug problems.

Check Content

From the command prompt, run the following command:

# lsuser -a core ALL 
root core=0
daemon core=0
bin core=0
sys core=0
adm core=0
uucp core=0
snapp core=0
ipsec core=0
srvproxy core=0
esaadmin core=0
sshd core=0
doejohn core=0

If any user does not have a value of "core = 0", this is a finding.