UBTU-16-010800 - File systems that contain user home directories must be mounted to prevent files with the setuid and setguid bit set from being executed.

Information

The 'nosuid' mount option causes the system to not execute setuid and setgid files with owner privileges. This option must be used for mounting any file system not containing approved setuid and setguid files. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Configure the '/etc/fstab' to use the 'nosuid' option on file systems that contain user home directories for interactive users.

Item Details

Audit Name: DISA STIG Ubuntu 16.04 LTS v2r3

Category: CONFIGURATION MANAGEMENT

Plugin: Unix

Control ID: a0799c9141f4988ecf056b502ad0839f0e0592ab7611adbc74d75c84193ee7d8

Detections

Analytics

UBTU-16-010800 - File systems that contain user home directories must be mounted to prevent files with the setuid and setguid bit set from being executed.

Information

Solution

See Also

Item Details