Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
|
ubuntu1604:1:1:7 [2017/05/02 00:31] Piotr Kłoczewski utworzono |
ubuntu1604:1:1:7 [2017/05/02 12:19] (current) |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== 1.1.7 Ensure nodev option set on /var/tmp partition (Scored) ====== | ====== 1.1.7 Ensure nodev option set on /var/tmp partition (Scored) ====== | ||
| - | **Profile Applicability:** \\ | + | =====Profile Applicability===== |
| - | + | <code> | |
| - | <note>Level 1 - Server \\ | + | Level 1 - Server |
| - | Level 1 - Workstation</note> | + | Level 1 - Workstation |
| - | + | </code> | |
| - | **Description:** \\ | + | =====Description===== |
| - | The ''nodev'' mount option specifies that the filesystem cannot contain special devices. \\ \\ | + | The ''nodev'' mount option specifies that the filesystem cannot contain special devices. |
| - | **Rationale:** \\ | + | =====Rationale===== |
| - | Since the ''/var/tmp'' filesystem is not intended to support devices, set this option to ensure that users cannot attempt to create block or character special devices in ''/var/tmp''. \\ \\ | + | Since the ''/var/tmp'' filesystem is not intended to support devices, set this option to ensure that users cannot attempt to create block or character special devices in ''/var/tmp''. |
| - | **Audit:** \\ | + | =====Audit===== |
| If a ''/var/tmp'' partition exists run the following command and verify that the ''nodev'' option is set on ''/var/tmp''. \\ | If a ''/var/tmp'' partition exists run the following command and verify that the ''nodev'' option is set on ''/var/tmp''. \\ | ||
| <Code:bash> | <Code:bash> | ||
| Line 15: | Line 15: | ||
| tmpfs on /var/tmp type tmpfs (rw,nosuid,nodev,noexec,relatime) | tmpfs on /var/tmp type tmpfs (rw,nosuid,nodev,noexec,relatime) | ||
| </Code> | </Code> | ||
| - | \\ | + | =====Remediation===== |
| - | **Remediation:** \\ | + | |
| Edit the ''/etc/fstab'' file and add ''nodev'' to the fourth field (mounting options) for the ''/var/tmp'' partition. See the ''fstab(5)'' manual page for more information. | Edit the ''/etc/fstab'' file and add ''nodev'' to the fourth field (mounting options) for the ''/var/tmp'' partition. See the ''fstab(5)'' manual page for more information. | ||
| Run the following command to remount ''/var/tmp'': | Run the following command to remount ''/var/tmp'': | ||
| Line 22: | Line 21: | ||
| # mount -o remount,nodev /var/tmp | # mount -o remount,nodev /var/tmp | ||
| </Code> | </Code> | ||
| - | |||
