Skip to content

1.5.3 Ensure Automatic Error Reporting is not enabled

Audit#

Run the following command to verify that the Apport Error Reporting Service is not enabled: 

# dpkg-query -s apport > /dev/null 2>&1 && grep -Psi -- '^\h*enabled\h*=\h*[^0]\b' /etc/default/apport

Nothing should be returned

Run the following command to verify that the apport service is not active: 

# systemctl is-active apport.service | grep '^active'

Nothing should be returned

Remediation#

Edit /etc/default/apport and add or edit the enabled parameter to equal 0: 

enabled=0

Run the following commands to stop and disable the apport service 

# systemctl stop apport.service
# systemctl --now disable apport.service

-- OR --

Run the following command to remove the apport package: 

# apt purge apport

Default Value:

enabled=1