Detections
Analytics

RHEL-10-700120 - RHEL 10 must mount "/boot" with the "nodev" option.

Information

The only legitimate location for device files is the "/dev" directory located on the root partition. The only exception to this is chroot jails.

Solution

Configure RHEL 10 to mount "/boot" with the "nodev" option.

Modify "/etc/fstab" to use the "nodev" option on the "/boot" directory.

To reload all implicit mount units and update the dependency graph so that new options will apply correctly at next remount, run the following command:

$ sudo systemctl daemon-reload

Use the following command to apply the changes immediately without a reboot:

$ sudo mount -o remount /boot

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_10_V1R1_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7(2), CAT|II, CCI|CCI-001764, Rule-ID|SV-281232r1166648_rule, STIG-ID|RHEL-10-700120, Vuln-ID|V-281232

Plugin: Unix

Control ID: 4d38e97d6e22bf41874d50166ae641122b7175321c59a74cf5d8e912ab0223c0