TMA-COS-1.1.9
Ensure nodev option set on /home partition
MittelStufe 1Automatisiertcos
Beschreibung
The nodev mount option specifies that the filesystem cannot contain special devices. Since the user partitions are not intended to support devices, set this option to ensure that users cannot attempt to create block or character special devices.
So wird geprüft
Prüfmethode: Shell-Befehl
shell
if ! findmnt -kn /home >/dev/null 2>&1; then echo compliant; elif findmnt -kn /home | grep -qw -- nodev; then echo compliant; else echo /home' is mounted without nodev'; fi- Erwartete Ausgabe
compliant
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
Run the following command to remount /var : # mount -o remount,nodev /home /etc is stateless on Container-Optimized OS. Therefore, /etc cannot be used to make these changes persistent across reboots. The steps mentioned above needs to be performed after every boot.
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- container-optimized-oscos
- Referenz
- CIS Google Container-Optimized OS Benchmark v1.2.0 - 1.1.9 Ensure nodev option set on /home partition
Diesen Host prüfen
Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.
shell
tmaegis scan --target cos