Check: RHEL-06-000269
Red Hat Enterprise Linux 6 STIG:
RHEL-06-000269
(in versions v2 r2 through v1 r14)
Title
Remote file systems must be mounted with the nodev option. (Cat II impact)
Discussion
Legitimate device files should only exist in the /dev directory. NFS mounts should not present device files to users.
Check Content
To verify the "nodev" option is configured for all NFS mounts, run the following command: $ mount | grep "nfs " All NFS mounts should show the "nodev" setting in parentheses, along with other mount options. If the setting does not show, this is a finding.
Fix Text
Add the "nodev" option to the fourth column of "/etc/fstab" for the line which controls mounting of any NFS mounts.
Additional Identifiers
Rule ID: SV-218021r603264_rule
Vulnerability ID: V-218021
Group Title: SRG-OS-000480
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000366 |
The organization implements the security configuration settings. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| CM-6 |
Configuration Settings |