Linux distributions
TMA-ROCKY9-1.1.2.2.1
Ensure /dev/shm is tmpfs or a separate partition
Opis
The /dev/shm directory is a world-writable directory that can function as shared memory that facilitates inter process communication (IPC).
Kako se proverava
Metod provere: Komanda ljuske
if findmnt -kn /dev/shm >/dev/null 2>&1; then echo compliant; else echo /dev/shm' is not a separate partition'; fi- Očekivani izlaz
compliant
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
For specific configuration requirements of the /dev/shm mount for your environment, modify /etc/fstab. Example: tmpfs /dev/shm tmpfs defaults,rw,nosuid,nodev,noexec,relatime,size=2G 0 0 Note: Using Btrfs subvolumes instead of traditional disk partitions changes how disk space is allocated and enforced, quotas may need to be configured to enforce storage limits and prevent resource exhaustion.
Svojstva
- Operativni sistemi
- rocky-9
- Oznake
- cis-convertedfilesystemlinux
- Referenca
- CIS Rocky Linux 9 Benchmark v3.0.0 - 1.1.2.2.1
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
tmaegis scan --target linux