Run the following command to verify "netconsole" is disabled through current runtime configuration:
# service netconsole status
If the service is disabled the command will return the following output:
netconsole is stopped
If the service is running, this is a finding.
Fix Text (F-43622r2_fix)
The "netconsole" service is responsible for loading the netconsole kernel module, which logs kernel printk messages over UDP to a syslog server. This allows debugging of problems where disk logging fails and serial consoles are impractical. The "netconsole" service can be disabled with the following commands:
# chkconfig netconsole off # service netconsole stop