| name | cis-ubuntu1604-v200-1-1-18 |
| description | Ensure /home partition includes the nodev option |
| category | cis-storage |
| version | 2.0.0 |
| author | cyberstrike-official |
| tags | ["cis","ubuntu","linux","ubuntu-16.04","filesystem","home","nodev","mount-option"] |
| cis_id | 1.1.18 |
| cis_benchmark | CIS Ubuntu Linux 16.04 LTS Benchmark v2.0.0 |
| tech_stack | ["ubuntu","linux"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Ensure /home partition includes the nodev option
Description
The nodev mount option specifies that the filesystem cannot contain special devices.
Rationale
Since the user partitions are not intended to support devices, set this option to ensure that users cannot attempt to create block or character special devices.
Impact
None noted.
Audit Procedure
Command Line
findmnt -n /home | grep -v nodev
Expected Result
No output should be returned.
Remediation
Command Line
mount -o remount,nodev /home
Default Value
Not set by default.
References
- CIS Controls Version 7 - 5.1 Establish Secure Configurations: Maintain documented, standard security configuration standards for all authorized operating systems and software.
Profile
Level 1 - Server / Level 1 - Workstation, Assessment: Automated