Check: OL6-00-000269
Oracle Linux 6 STIG:
OL6-00-000269
(in versions v2 r7 through v1 r9)
Title
Remote file systems must be mounted with the nodev option. (Cat II impact)
Discussion
Legitimate device files should only exist in the /dev directory. NFS mounts should not present device files to users.
Check Content
To verify the "nodev" option is configured for all NFS mounts, run the following command: $ mount | grep nfs All NFS mounts should show the "nodev" setting in parentheses, along with other mount options. If the setting does not show, this is a finding.
Fix Text
Add the "nodev" option to the fourth column of "/etc/fstab" for the line which controls mounting of any NFS mounts.
Additional Identifiers
Rule ID: SV-209008r793729_rule
Vulnerability ID: V-209008
Group Title: SRG-OS-000480
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
Number | Title |
---|---|
CM-6 |
Configuration Settings |