Add nodev Option to /home
Details When set on a file system, this option prevents character and block special devices from being defined, or if...
- Home
- Security Hardening
- CIS Debian Linux 7 L1 V1.0.0
CIS Debian Linux 7 L1 V1.0.0
Add nodev Option to Removable Media Partitions
Details Set nodev on removable media to prevent character and block special devices that are present on the removable media...Add nodev Option to /run/shm Partition
Details The nodev mount option specifies that the /run/shm (temporary filesystem stored in memory) cannot contain block or character special...Add noexec Option to Removable Media Partitions
Details Set noexec on removable media to prevent programs from executing from the removable media. Setting this option on a...Add noexec Option to /run/shm Partition
Details Set noexec on the shared memory partition to prevent programs from executing from there. Setting this option on a...Add nosuid Option to Removable Media Partitions
Details Set nosuid on removable media to prevent setuid and setgid executable files that are on that media from being...Add nosuid Option to /run/shm Partition
Details The nosuid mount option specifies that the /run/shm (temporary filesystem stored in memory) will not execute setuid and setgid...Bind Mount the /var/tmp directory to /tmp
Details The /var/tmp directory is normally a standalone directory in the /var file system. Binding /var/tmp to /tmp establishes an...Configure Network Time Protocol (NTP)
Details The Network Time Protocol (NTP) is designed to synchronize system clocks across a variety of systems and use a...Configure Network Time Protocol (NTP) – ntp server
Details The Network Time Protocol (NTP) is designed to synchronize system clocks across a variety of systems and use a...