Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
ubuntu1604:1:1:13 [2017/05/02 01:37]
Piotr Kłoczewski utworzono
ubuntu1604:1:1:13 [2017/05/02 12:28] (current)
Line 1: Line 1:
 ====== 1.1.13 Ensure nodev option set on /home partition (Scored) ====== ====== 1.1.13 Ensure nodev option set on /home partition (Scored) ======
-**Profile Applicability:** \\  +=====Profile Applicability=====   
-   +<code> 
-<note>Level 1 - Server ​\\  +Level 1 - Server  
-Level 1 - Workstation</​note+Level 1 - Workstation 
- +</code
-**Description:** \\  +=====Description===== 
-The ''​nodev''​ mount option specifies that the filesystem cannot contain special devices. ​\\ \\  +The ''​nodev''​ mount option specifies that the filesystem cannot contain special devices. 
-**Rationale:** \\  +=====Rationale===== 
-Since the user partitions are not intended to support devices, set this option to ensure that users cannot attempt to create block or character special devices. ​\\ \\  +Since the user partitions are not intended to support devices, set this option to ensure that users cannot attempt to create block or character special devices. 
-**Audit:** \\ +=====Audit===== 
 If a ''/​home''​ partition exists run the following command and verify that the ''​nodev''​ option is set on ''/​home''​. \\  If a ''/​home''​ partition exists run the following command and verify that the ''​nodev''​ option is set on ''/​home''​. \\ 
 <​Code:​bash>​ <​Code:​bash>​
Line 15: Line 15:
 /dev/xvdf1 on /home type ext4 (rw,​nodev,​relatime,​data=ordered) /dev/xvdf1 on /home type ext4 (rw,​nodev,​relatime,​data=ordered)
 </​Code>​ </​Code>​
-\\ +=====Remediation=====  
-**Remediation:** \\  +Edit the ''/​etc/​fstab''​ file and add ''​nodev''​ to the fourth field (mounting options) for the ''/​home partition''​. See the ''​fstab(5)''​ manual page for more information.
-Edit the ''/​etc/​fstab''​ file and add ''​nodev''​ to the fourth field (mounting options) for the ''/​home partition''​. See the ''​fstab(5)''​ manual page for more information. ​\\+
 <​Code:​bash>​ <​Code:​bash>​
 # mount -o remount,​nodev /home # mount -o remount,​nodev /home
 </​Code>​ </​Code>​
- \\ +=====Impact=====  
-**Impact:** \\  +Resizing filesystems is a common activity in cloud-hosted servers. Separate filesystem partitions may prevent successful resizing, or may require the installation of additional tools solely for the purpose of resizing operations. The use of these additional tools may introduce their own security considerations. 
-Resizing filesystems is a common activity in cloud-hosted servers. Separate filesystem partitions may prevent successful resizing, or may require the installation of additional tools solely for the purpose of resizing operations. The use of these additional tools may introduce their own security considerations. ​\\ \\  +=====Notes===== 
-**Notes:** \\ +
 The actions in this recommendation refer to the ''/​home''​ partition, which is the default user partition that is defined in many distributions. If you have created other user partitions, it is recommended that the Remediation and Audit steps be applied to these partitions as well. The actions in this recommendation refer to the ''/​home''​ partition, which is the default user partition that is defined in many distributions. If you have created other user partitions, it is recommended that the Remediation and Audit steps be applied to these partitions as well.
-