Details
Set nodev on removable media to prevent character and block special devices that are
present on the removable media from being treated as device files.
*Rationale*
Removable media containing character and block special devices could be used to
circumvent security controls by allowing non-root users to access sensitive device files
such as /dev/kmem or the raw disk partitions.
Solution
Edit the /etc/fstab file and add ‘nodev’ to the fourth field (mounting options). Look for
entries that have mount points that contain words such as floppy or cdrom. See the
fstab(5) manual page for more information.
Supportive Information
The following resource is also helpful.
This control applies to the following type of system Unix.