TMAegisBeta
Više pravila za linux

Linux distributions

TMA-ROCKY9-1.1.2.2.1

Ensure /dev/shm is tmpfs or a separate partition

SrednjaNivo 1Automatskalinux

Opis

The /dev/shm directory is a world-writable directory that can function as shared memory that facilitates inter process communication (IPC).

Kako se proverava

Metod provere: Komanda ljuske

shell
if findmnt -kn /dev/shm >/dev/null 2>&1; then echo compliant; else echo /dev/shm' is not a separate partition'; fi
Očekivani izlaz
compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

For specific configuration requirements of the /dev/shm mount for your environment, modify /etc/fstab. Example: tmpfs /dev/shm tmpfs defaults,rw,nosuid,nodev,noexec,relatime,size=2G 0 0 Note: Using Btrfs subvolumes instead of traditional disk partitions changes how disk space is allocated and enforced, quotas may need to be configured to enforce storage limits and prevent resource exhaustion.

Svojstva

Operativni sistemi
rocky-9
Oznake
cis-convertedfilesystemlinux
Referenca
CIS Rocky Linux 9 Benchmark v3.0.0 - 1.1.2.2.1

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell
tmaegis scan --target linux