SLES-12-010790 - SUSE operating system file systems that contain user home directories must be mounted to prevent files with the setuid and setgid bit set from being executed.

Information

The 'nosuid' mount option causes the system to not execute setuid and setgid files with owner privileges. This option must be used for mounting any file system not containing approved setuid and setguid files. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Configure the SUSE operating system '/etc/fstab' file to use the 'nosuid' option on file systems that contain user home directories for interactive users.

Re-mount the filesystems.

# mount -o remount /home

Item Details

Audit Name: DISA SLES 12 STIG v3r4

Category: CONFIGURATION MANAGEMENT

Plugin: Unix

Control ID: ec1a10fdd212ab886eecd6dec0e6fcd5f7ef206b9b4b822b23c687d8ab4ca795

Detections

Analytics

SLES-12-010790 - SUSE operating system file systems that contain user home directories must be mounted to prevent files with the setuid and setgid bit set from being executed.

Information

Solution

See Also

Item Details