Container-Optimized OS
TMA-COS-1.1.9
Ensure nodev option set on /home partition
СредњаНиво 1Аутоматскаcos
Опис
The nodev mount option specifies that the filesystem cannot contain special devices. Since the user partitions are not intended to support devices, set this option to ensure that users cannot attempt to create block or character special devices.
Како се проверава
Метод провере: Команда љуске
shell
if ! findmnt -kn /home >/dev/null 2>&1; then echo compliant; elif findmnt -kn /home | grep -qw -- nodev; then echo compliant; else echo /home' is mounted without nodev'; fi- Очекивани излаз
compliant
Како се исправља
Метод исправке: Смерница или закрпа инфраструктуре
Run the following command to remount /var : # mount -o remount,nodev /home /etc is stateless on Container-Optimized OS. Therefore, /etc cannot be used to make these changes persistent across reboots. The steps mentioned above needs to be performed after every boot.
Својства
- Оперативни системи
- Било који
- Ознаке
- container-optimized-oscos
- Референца
- CIS Google Container-Optimized OS Benchmark v1.2.0 - 1.1.9 Ensure nodev option set on /home partition
Проверите овај рачунар
Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.
shell
tmaegis scan --target cos