Detections
Analytics

1.185 SLES-15-040170

Information

SUSE operating system file systems that are being imported via Network File System (NFS) must be mounted to prevent binary files from being executed.

GROUP ID: V-235001
RULE ID: SV-235001r991589

The "noexec" mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.

Solution

Configure the SUSE operating system "/etc/fstab" file to use the "noexec" option on file systems that are being exported via NFS.

See Also

https://workbench.cisecurity.org/benchmarks/23779

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-235001r991589_rule, STIG-ID|SLES-15-040170, Vuln-ID|V-235001

Plugin: Unix

Control ID: afbe713db318405fb428d6da51c49f0a99dfec00c307fb42df881741524c56a4