UBTU-16-010810 - File systems that are used with removable media must be mounted to prevent files with the setuid and setguid bit set from being executed.

Information

The 'nosuid' mount option causes the system to not execute 'setuid' and 'setgid' files with owner privileges. This option must be used for mounting any file system not containing approved 'setuid' and 'setguid' files. Executing files from untrusted file systems increases the opportunity for unprivileged users to attain unauthorized administrative access.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Configure the '/etc/fstab' to use the 'nosuid' option on file systems that are associated with removable media.

Item Details

Audit Name: DISA STIG Ubuntu 16.04 LTS v2r3

Category: CONFIGURATION MANAGEMENT

Plugin: Unix

Control ID: a471bf8c822ba6c332143c535972cb31ebcf6e5c02f9822cfb399dff68a9541f

Detections

Analytics

UBTU-16-010810 - File systems that are used with removable media must be mounted to prevent files with the setuid and setguid bit set from being executed.

Information

Solution

See Also

Item Details