Ensure nosuid option set on /dev/shm partition

Cara pemeriksaan

Metode audit: Perintah shell

if ! findmnt -kn /dev/shm >/dev/null 2>&1; then echo compliant; elif findmnt -kn /dev/shm | grep -qw -- nosuid; then echo compliant; else echo /dev/shm' is mounted without nosuid'; fi

Output yang diharapkan

compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Run the following command to remount /dev/shm : # mount -o remount,nosuid /dev/shm /etc is stateless on Container-Optimized OS. Therefore, /etc cannot be used to make these changes persistent across reboots. The steps mentioned above needs to be performed after every boot.

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

tmaegis scan --target cos