Linux distributions
TMA-ROCKY9-1.1.2.2.1
Ensure /dev/shm is tmpfs or a separate partition
SedangLevel 1Otomatislinux
Deskripsi
The /dev/shm directory is a world-writable directory that can function as shared memory that facilitates inter process communication (IPC).
Cara pemeriksaan
Metode audit: Perintah shell
shell
if findmnt -kn /dev/shm >/dev/null 2>&1; then echo compliant; else echo /dev/shm' is not a separate partition'; fi- Output yang diharapkan
compliant
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
For specific configuration requirements of the /dev/shm mount for your environment, modify /etc/fstab. Example: tmpfs /dev/shm tmpfs defaults,rw,nosuid,nodev,noexec,relatime,size=2G 0 0 Note: Using Btrfs subvolumes instead of traditional disk partitions changes how disk space is allocated and enforced, quotas may need to be configured to enforce storage limits and prevent resource exhaustion.
Properti
- Sistem operasi
- rocky-9
- Tag
- cis-convertedfilesystemlinux
- Referensi
- CIS Rocky Linux 9 Benchmark v3.0.0 - 1.1.2.2.1
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
shell
tmaegis scan --target linux