TMA-COS-1.1.9

Ensure nodev option set on /home partition

SedangLevel 1Otomatiscos

Deskripsi

The nodev mount option specifies that the filesystem cannot contain special devices. Since the user partitions are not intended to support devices, set this option to ensure that users cannot attempt to create block or character special devices.

Cara pemeriksaan

Metode audit: Perintah shell

shell

if ! findmnt -kn /home >/dev/null 2>&1; then echo compliant; elif findmnt -kn /home | grep -qw -- nodev; then echo compliant; else echo /home' is mounted without nodev'; fi

Output yang diharapkan: compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Run the following command to remount /var : # mount -o remount,nodev /home /etc is stateless on Container-Optimized OS. Therefore, /etc cannot be used to make these changes persistent across reboots. The steps mentioned above needs to be performed after every boot.

Properti

Sistem operasi: Apa saja
Tag: container-optimized-oscos
Referensi: CIS Google Container-Optimized OS Benchmark v1.2.0 - 1.1.9 Ensure nodev option set on /home partition

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target cos