TMA-COS-1.1.9

Ensure nodev option set on /home partition

보통레벨 1자동cos

설명

The nodev mount option specifies that the filesystem cannot contain special devices. Since the user partitions are not intended to support devices, set this option to ensure that users cannot attempt to create block or character special devices.

점검 방법

감사 방식: 셸 명령

shell

if ! findmnt -kn /home >/dev/null 2>&1; then echo compliant; elif findmnt -kn /home | grep -qw -- nodev; then echo compliant; else echo /home' is mounted without nodev'; fi

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

Run the following command to remount /var : # mount -o remount,nodev /home /etc is stateless on Container-Optimized OS. Therefore, /etc cannot be used to make these changes persistent across reboots. The steps mentioned above needs to be performed after every boot.

속성

운영 체제: 모두
태그: container-optimized-oscos
참고 자료: CIS Google Container-Optimized OS Benchmark v1.2.0 - 1.1.9 Ensure nodev option set on /home partition

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target cos