mediumfilesystemverified ✓rollback-safe
Ensure nodev option on /dev/shm partition
mount-dev-shm-nodev · RHEL ≥ 8 · 1 impl
Description
The nodev mount option prevents device files from being interpreted on /dev/shm. This shared memory filesystem should not contain device files.
Rationale
Allowing device files on /dev/shm could allow creation of special devices that access hardware directly.
Check → Remediate
Checkmount_option
- mount_point:
- /dev/shm
- options:
- nodev
Remediatemount_option_set
- mount_point:
- /dev/shm
- options:
- nodev
Framework references
CIS
rhel8 1.1.2.2.2rhel9 1.1.2.2.2rhel10 1.1.2.2.2
STIG
V-230508V-257863V-281235
NIST 800-53
CM-6AC-3
Live verification
rhel10:checkrhel8:checkrhel9:check
#mount#dev-shm#hardening