mediumfilesystemunverified
Ensure nonroot local partitions are mounted with nodev
mount-nonroot-nodev · RHEL ≥ 10 · 1 impl
Description
All nonroot local partitions must be mounted with the "nodev" option so device files cannot be interpreted from those filesystems.
Rationale
Device files on a data partition could be used to access system devices outside normal controls.
Check → Remediate
Checkcommand
mount 2>/dev/null | grep -E '^/dev/\S+ on /\S' | grep -v ' on / ' | grep -v 'nodev' | head -1 | grep -q . && exit 1 || exit 0
- expected_exit:
- 0
Remediatemanual
- note:
- Add the nodev option to each nonroot local partition in /etc/fstab and remount.
Framework references
STIG
V-281248 / RHEL-10-700200
NIST 800-53
CM-6AC-6
#mount#nodev#stig