Detections
Analytics
OL07-00-021021 - The Oracle Linux operating system must prevent binary files from being executed on file systems that are being imported via Network File System (NFS) - NFS.
Information
The 'noexec' mount option causes the system not to execute binary files. This option must be used for mounting any file system not containing approved binary files, as they may be incompatible. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
Solution
Configure the '/etc/fstab' to use the 'noexec' option on file systems that are being imported via NFS.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_7_V3R5_STIG.zip
Item Details
Audit Name: DISA Oracle Linux 7 STIG v3r5
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-221744r991589_rule, STIG-ID|OL07-00-021021, STIG-Legacy|SV-108331, STIG-Legacy|V-99227, Vuln-ID|V-221744
Plugin: Unix
Control ID: 094b1a8189aa489d7ce8a62911f06803e9488b4c14a4e122921d3f9af198eab7