Ensure nodev option set on removable media partitions

SedangLevel 1Tinjauan manualros

Deskripsi

The nodev mount option specifies that the filesystem cannot contain special devices. Manual review against site policy. Host-level control from the CIS ROS Melodic benchmark (Ubuntu 18.04 robot hosts); run as root.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

Run the following command and verify that the nodev option is set on all removable media partitions. # mount

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Edit the /etc/fstab file and add nodev to the fourth field (mounting options) of all removable media partitions. Look for entries that have mount points that contain words such as floppy or cdrom. See the fstab(5) manual page for more information.

Properti

Sistem operasi: Apa saja
Tag: rosros1melodicsystem
Referensi: CIS ROS Melodic Benchmark v1.0.0 - 1.1.18 Ensure nodev option set on removable media partitions