2.14 Add nodev Option to /run/shm Partition

Information

The nodev mount option specifies that the /run/shm (temporary filesystem stored in
memory) cannot contain block or character special devices.

*Rationale*

Since the /run/shm filesystem is not intended to support devices, set this option to ensure
that users cannot attempt to create special devices in /run/shm partitions.

Solution

Edit the /etc/fstab file and add nodev to the fourth field (mounting options of entries that
have mount points that contain /run/shm. See the fstab(5) manual page for more
information.# mount -o remount,nodev /run/shm

See Also

https://workbench.cisecurity.org/files/91

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CSCv6|3.1, CSCv7|5.1

Plugin: Unix

Control ID: 9c825816a4793f3d1971aed77a9a09de8583f4347aa9e75b21e2c26c910a459c