Detections
Analytics

GEN002430 - Removable media, remote file systems and any file system not containing approved device files must be mounted with nodev

Information

The nodev (or equivalent) mount option causes the system to not handle device files as system devices. This option must be used for mounting any file system not containing approved device files. Device files can provide direct access to system hardware and can compromise security if not protected.

Solution

Edit /etc/filesystems and add the options = nodev to all entries for remote or removable media file systems, and file systems containing no approved device files.

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10), CAT|II, CCI|CCI-000366, Rule-ID|SV-38747r1_rule, STIG-ID|GEN002430, Vuln-ID|V-22368

Plugin: Unix

Control ID: 9cc87c58d29fe05f877f97d7cecdb8ec7ff188fef39a61cef8a590f00ac493f7