Ensure /dev/shm is tmpfs or a separate partition

检查方式

审计方法: Shell 命令

if findmnt -kn /dev/shm >/dev/null 2>&1; then echo compliant; else echo /dev/shm' is not a separate partition'; fi

预期输出

compliant

修复方式

修复方法: 操作指南或基础设施补丁

For specific configuration requirements of the /dev/shm mount for your environment, modify /etc/fstab. Example: tmpfs /dev/shm tmpfs defaults,rw,nosuid,nodev,noexec,relatime,size=2G 0 0 Note: Using Btrfs subvolumes instead of traditional disk partitions changes how disk space is allocated and enforced, quotas may need to be configured to enforce storage limits and prevent resource exhaustion.

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

tmaegis scan --target linux