Detections
Analytics

1.182 ALMA-09-023120

Information

AlmaLinux OS 9 must prevent special devices on file systems that are imported via Network File System (NFS).

GROUP ID: V-269285
RULE ID: SV-269285r1050167

The "nodev" mount option causes the system to not interpret character or block special devices. Executing character or block special devices from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.

Solution

Update each NFS mounted file system to use the "nodev" option on file systems that are being imported via NFS.

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-269285r1050167_rule, STIG-ID|ALMA-09-023120, Vuln-ID|V-269285

Plugin: Unix

Control ID: f5ff7275f299ca2b2b4697f513fe7866d7993688e53ef48b250a9f6007e51369