Detections
Analytics
AZLX-23-002590 - Amazon Linux 2023 must mount /dev/shm with the nosuid option.
Information
The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.Solution
Configure Amazon Linux 2023 so that "/dev/shm" is mounted with the "nosuid" option.Modify "/etc/fstab" to use the "nosuid" option on the "/dev/shm" file system.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Amazon_Linux_2023_V1R4_STIG.zip
Item Details
Audit Name: DISA Amazon Linux 2023 STIG v1r4
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7(2), CAT|II, CCI|CCI-001764, Rule-ID|SV-274180r1198347_rule, STIG-ID|AZLX-23-002590, Vuln-ID|V-274180
Plugin: Unix
Control ID: c84ad9faf99700354d1636ab51099f83d239d72a96d65364209040e4fff3241f