Detections
Analytics
UBTU-16-010820 - File systems that are being imported via Network File System (NFS) must be mounted to prevent files with the setuid and setguid bit set from being executed.
Information
The 'nosuid' mount option causes the system to not execute 'setuid' and 'setgid' files with owner privileges. This option must be used for mounting any file system not containing approved 'setuid' and 'setguid' files. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.Solution
Configure the '/etc/fstab' to use the 'nosuid' option on file systems that are being imported via Network File System (NFS).See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_16-04_LTS_V2R3_STIG.zip
Item Details
Audit Name: DISA STIG Ubuntu 16.04 LTS v2r3
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215014r610931_rule, STIG-ID|UBTU-16-010820, STIG-Legacy|SV-90259, STIG-Legacy|V-75579, Vuln-ID|V-215014
Plugin: Unix
Control ID: 71634b353f9ef5a7b0f0fb02e222e17fa3d2191e5abdd9e9df8a4d66bb9cd600