Details

Insecure file locking could allow for sensitive data to be viewed or edited by an unauthorized user.

Solution

Remove the ‘insecure_locks’ option from all NFS exports on the system.

Procedure:

Edit /etc/exports and remove all instances of the insecure_locks option.

Re-export the file systems to make the setting take effect.
# exportfs -a

Supportive Information

The following resource is also helpful.

• http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Access Control, Identification and Authentication.This control applies to the following type of system Unix.

References

• 800-53|AC-6
• 800-53|IA-2
• CAT|I
• CCI|CCI-000225
• CCI|CCI-000764
• Group-ID|V-4339
• Rule-ID|SV-37316r1_rule
• STIG-ID|GEN000000-LNX00560
• Vuln-ID|V-4339

Source

• Tenable.com/audits