Ensure nodev option set on /dev/shm partition – mount
Details The nodev mount option specifies that the filesystem cannot contain special devices. Rationale: Since the /dev/shm filesystem is not...
- Home
- Security Hardening
- CIS Red Hat Enterprise Linux 7 STIG V2.0.0 STIG
CIS Red Hat Enterprise Linux 7 STIG V2.0.0 STIG
Ensure nodev option set on /dev/shm partition – fstab
Details The nodev mount option specifies that the filesystem cannot contain special devices. Rationale: Since the /dev/shm filesystem is not...Ensure noexec option is configured for NFS – NFS.
Details The operating system must prevent binary files from being executed on file systems that are being imported via Network...Ensure noexec option set on /dev/shm partition – fstab
Details The noexec mount option specifies that the filesystem cannot contain executable binaries. Rationale: Setting this option on a file...Ensure noexec option set on /dev/shm partition – mount
Details The noexec mount option specifies that the filesystem cannot contain executable binaries. Rationale: Setting this option on a file...Ensure nosuid is set on users’ home directories.
Details The operating system must be configured so that file systems containing user home directories are mounted to prevent files...Ensure nosuid option is set for NFS – NFS.
Details The operating system must prevent files with the setuid and setgid bit set from being executed on file systems...Ensure nosuid option set on /dev/shm partition – fstab
Details The nosuid mount option specifies that the filesystem cannot contain setuid files. Rationale: Setting this option on a file...Ensure nosuid option set on /dev/shm partition – mount
Details The nosuid mount option specifies that the filesystem cannot contain setuid files. Rationale: Setting this option on a file...Ensure nosuid option set on removable media partitions
Details The nosuid mount option specifies that the filesystem cannot contain setuid files. Rationale: Setting this option on a file...