This is an old revision of the document!


A PCRE internal error occured. This might be caused by a faulty plugin

====== 1.1.15 Ensure nosuid option set on /dev/shm partition (Scored) ====== **Profile Applicability:** \\ <note>Level 1 - Server \\ Level 1 - Workstation</note> **Description:** \\ The ''nosuid'' mount option specifies that the filesystem cannot contain ''setuid'' files. \\ \\ **Rationale:** \\ Setting this option on a file system prevents users from introducing privileged programs onto the system and allowing non-root users to execute them. \\ \\ **Audit:** \\ Run the following command and verify that the ''nosuid'' option is set on ''/dev/shm''. \\ <Code:bash> # mount | grep /dev/shm tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev,noexec,relatime) </Code> \\ **Remediation:** \\ Edit the ''/etc/fstab'' file and add ''nosuid'' to the fourth field (mounting options) for the ''/dev/shm'' partition. See the ''fstab(5)'' manual page for more information. \\ Run the following command to remount ''/dev/shm'': \\ <Code:bash> # mount -o remount,nodev /dev/shm </Code>