AIX7-00-001139 - AIX removable media, remote file systems, and any file system not containing approved device files must be mounted with the nodev option.

Information

The nodev (or equivalent) mount option causes the system to not handle device files as system devices. This option must be used for mounting any file system not containing approved device files. Device files can provide direct access to system hardware and can compromise security if not protected.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Edit "/etc/filesystems" and add the "options = nodev" to all entries for remote or removable media file systems, and file systems containing no approved device files.

Item Details

Audit Name: DISA IBM AIX 7.x STIG v3r3

Category: CONFIGURATION MANAGEMENT

Plugin: Unix

Control ID: f3ba461e70bb6fca1791c70ef27e4adc4676be29d89b121378a1af12ba4e1c6d

Detections

Analytics

AIX7-00-001139 - AIX removable media, remote file systems, and any file system not containing approved device files must be mounted with the nodev option.

Information

Solution

See Also

Item Details