Ensure noexec option set on removable media partitions
Details The noexec mount option specifies that the filesystem cannot contain executable binaries. Rationale: Setting this option on a file...
- Home
- Security Hardening
- CIS Fedora 19 Family Linux Server L1 V1.0.0
CIS Fedora 19 Family Linux Server L1 V1.0.0
Ensure noexec option set on /tmp partition
Details The noexec mount option specifies that the filesystem cannot contain executable binaries. Rationale: Since the /tmp filesystem is only...Ensure noexec option set on /var/tmp partition
Details The noexec mount option specifies that the filesystem cannot contain executable binaries. Rationale: Since the /var/tmp filesystem is only...Ensure nosuid option set on /dev/shm partition
Details The nosuid mount option specifies that the filesystem cannot contain setuid files. Note: /dev/shm is mounted automatically by systemd....Ensure nosuid option set on removable media partitions
Details The nosuid mount option specifies that the filesystem cannot contain setuid files. Rationale: Setting this option on a file...Ensure nosuid option set on /tmp partition
Details The nosuid mount option specifies that the filesystem cannot contain setuid files. Rationale: Since the /tmp filesystem is only...Ensure nosuid option set on /var/tmp partition
Details The nosuid mount option specifies that the filesystem cannot contain setuid files. Rationale: Since the /var/tmp filesystem is only...Ensure package manager repositories are configured
Details Systems need to have package manager repositories configured to ensure they receive the latest patches and updates. Rationale: If...Ensure permissions on bootloader config are configured – /boot/grub2/grub.cfg
Details The grub configuration file contains information on boot settings and passwords for unlocking boot options. The grub2 configuration is...Ensure permissions on bootloader config are configured – /boot/grub2/user.cfg
Details The grub configuration file contains information on boot settings and passwords for unlocking boot options. The grub2 configuration is...