Detections
Analytics
OL09-00-002063 - OL 9 must mount /var/log with the nosuid option.
Information
The "nosuid" mount option causes the system to not execute "setuid" and "setgid" files with owner privileges. This option must be used for mounting any file system not containing approved "setuid" and "setguid" files. Executing files from untrusted file systems increases the opportunity for nonprivileged users to attain unauthorized administrative access.Solution
Configure OL 9 to mount /var/log with the nosuid option.Modify "/etc/fstab" to use the "nosuid" option on the "/var/log" directory.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_9_V1R5_STIG.zip
Item Details
Audit Name: DISA Oracle Linux 9 STIG v1r5
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7(2), CAT|II, CCI|CCI-001764, Rule-ID|SV-271659r1091689_rule, STIG-ID|OL09-00-002063, Vuln-ID|V-271659
Plugin: Unix
Control ID: b377cc4dff5b1b2764aa9f15b95d467463000c3e1148681873ad6ce800688dd4