The abrt-addon-ccpp package should not be present in the container or container image.
Remove the abrt-addon-ccpp package from Containerfile and rebuild the container image.
abrt-addon-ccpp contains hooks for C/C++ crashed programs and abrt's C/C++ analyzer plugin.
The abrt-addon-kerneloops package should not be present in the container or container image.
Remove the abrt-addon-kerneloops package from Containerfile and rebuild the container image.
abrt-addon-kerneloops contains plugins for collecting kernel crash information and reporter plugin which sends this information to a specified server, usually to kerneloops.org.
The abrt-addon-python package should not be present in the container or container image.
Remove the abrt-addon-python package from Containerfile and rebuild the container image.
abrt-addon-python contains python hook and python analyzer plugin for handling uncaught exceptions in python programs.
The abrt-cli package should not be present in the container or container image.
Remove the abrt-cli package from Containerfile and rebuild the container image.
abrt-cli contains a command line client for controlling abrt daemon over sockets.
The abrt-libs package should not be present in the container or container image.
Remove the abrt-libs package from Containerfile and rebuild the container image.
abrt-libs provides libraries for the ABRT package.
The abrt-plugin-logger package should not be present in the container or container image.
Remove the abrt-plugin-logger package from Containerfile and rebuild the container image.
abrt-plugin-logger is an ABRT plugin which writes a report to a specified file.
The abrt-plugin-rhtsupport package should not be present in the container or container image.
Remove the abrt-plugin-rhtsupport package from Containerfile and rebuild the container image.
abrt-plugin-rhtsupport is a ABRT plugin to report bugs into the Red Hat Support system.
The abrt-plugin-sosreport package should not be present in the container or container image.
Remove the abrt-plugin-sosreport package from Containerfile and rebuild the container image.
abrt-plugin-sosreport provides a plugin to include an sosreport in an ABRT report.
The abrt-server-info-page package should not be present in the container or container image.
Remove the abrt-server-info-page package from Containerfile and rebuild the container image.
abrt-server-info-page provides a web page with summary of ABRT services.
The Automatic Bug Reporting Tool (abrt) collects
and reports crash data when an application crash is detected. Using a variety
of plugins, abrt can email crash reports to system administrators, log crash
reports to files, or forward crash reports to a centralized issue tracking
system such as RHTSupport.
The abrt package should not be present in the container or container image.
Remove the abrt package from Containerfile and rebuild the container image.
Mishandling crash data could expose sensitive information about vulnerabilities in software executing on the system, as well as sensitive information from within a process's address space or registers.
The python3-abrt-addon package should not be present in the container or container image.
Remove the python3-abrt-addon package from Containerfile and rebuild the container image.
python3-abrt-addon contains python hook and python analyzer plugin for handling uncaught exceptions in python programs.
By default, the SELinux boolean abrt_anon_write is disabled.
If this setting is enabled, it should be disabled.
To disable the abrt_anon_write SELinux boolean, run the following command:
$ sudo setsebool -P abrt_anon_write off
By default, the SELinux boolean abrt_handle_event is disabled.
If this setting is enabled, it should be disabled.
To disable the abrt_handle_event SELinux boolean, run the following command:
$ sudo setsebool -P abrt_handle_event off
By default, the SELinux boolean abrt_upload_watch_anon_write is enabled.
This setting should be disabled as it allows the Automatic Bug Report Tool (ABRT)
to modify public files used for public file transfer services.
To disable the abrt_upload_watch_anon_write SELinux boolean, run the following command:
$ sudo setsebool -P abrt_upload_watch_anon_write off
The Automatic Bug Reporting Tool (abrtd) daemon collects
and reports crash data when an application crash is detected. Using a variety
of plugins, abrtd can email crash reports to system administrators, log crash
reports to files, or forward crash reports to a centralized issue tracking
system such as RHTSupport.
The abrtd service can be disabled with the following command:
$ sudo systemctl mask --now abrtd.service
Mishandling crash data could expose sensitive information about vulnerabilities in software executing on the system, as well as sensitive information from within a process's address space or registers.