mediumfilesystemverified ✓rollback-safe
Ensure nodev option on /tmp partition
mount-tmp-nodev · RHEL ≥ 8 · 1 impl
Description
The nodev mount option prevents device files from being interpreted on the /tmp filesystem. Device files should only exist in /dev.
Rationale
Allowing device files on /tmp could allow an attacker to create block or character special devices that could be used to access hardware directly.
Check → Remediate
Checkmount_option
- mount_point:
- /tmp
- options:
- nodev
Remediatemount_option_set
- mount_point:
- /tmp
- options:
- nodev
Framework references
CIS
rhel8 1.1.2.1.2rhel9 1.1.2.1.2rhel10 1.1.2.1.2
STIG
V-230511V-257866V-281238
NIST 800-53
CM-6AC-3
Live verification
rhel10:checkrhel8:checkrhel9:check
#mount#tmp#hardening