Detections
Analytics
SLES-12-010820 - SUSE operating system file systems that are being imported via Network File System (NFS) must be mounted to prevent binary files from being executed.
Information
The 'noexec' mount option causes the system to not execute binary files. This option must be used for mounting any file system not containing approved binary files as they may be incompatible. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
Solution
Configure the SUSE operating system '/etc/fstab' file to use the 'noexec' option on file systems that are being exported via NFS.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLES_12_V3R4_STIG.zip
Item Details
Audit Name: DISA SLES 12 STIG v3r4
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-217181r991589_rule, STIG-ID|SLES-12-010820, STIG-Legacy|SV-91947, STIG-Legacy|V-77251, Vuln-ID|V-217181
Plugin: Unix
Control ID: 7d8730e9d8ecdc13b1112a183532fc63cd8a23cf8275ecfe60490b786bad29ca