TMAegisBeta
Aturan lainnya untuk linux

Linux distributions

TMA-ROCKY9-1.1.2.2.1

Ensure /dev/shm is tmpfs or a separate partition

SedangLevel 1Otomatislinux

Deskripsi

The /dev/shm directory is a world-writable directory that can function as shared memory that facilitates inter process communication (IPC).

Cara pemeriksaan

Metode audit: Perintah shell

shell
if findmnt -kn /dev/shm >/dev/null 2>&1; then echo compliant; else echo /dev/shm' is not a separate partition'; fi
Output yang diharapkan
compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

For specific configuration requirements of the /dev/shm mount for your environment, modify /etc/fstab. Example: tmpfs /dev/shm tmpfs defaults,rw,nosuid,nodev,noexec,relatime,size=2G 0 0 Note: Using Btrfs subvolumes instead of traditional disk partitions changes how disk space is allocated and enforced, quotas may need to be configured to enforce storage limits and prevent resource exhaustion.

Properti

Sistem operasi
rocky-9
Tag
cis-convertedfilesystemlinux
Referensi
CIS Rocky Linux 9 Benchmark v3.0.0 - 1.1.2.2.1

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell
tmaegis scan --target linux