[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

243238

 
 

909

 
 

192833

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-90678-4

Platform: rhel7,centos7Date: (C)2017-06-29   (M)2022-10-10



Add noexec Option to /dev/shm The 'noexec' mount option can be used to prevent binaries from being executed out of '/dev/shm'. It can be dangerous to allow the execution of binaries from world-writable temporary storage directories such as '/dev/shm'.


Parameter:


Technical Mechanism:

Add the 'noexec' option to the fourth column of '/etc/fstab' for the line which controls mounting of '/dev/shm'. Rationale: Allowing users to execute binaries from world-writable directories such as '/dev/shm' can expose the system to potential compromise. Fix: No Remediation Info

CCSS Severity:CCSS Metrics:
CCSS Score : Attack Vector:
Exploit Score: Attack Complexity:
Impact Score: Privileges Required:
Severity: User Interaction:
Vector: Scope:
 Confidentiality:
 Integrity:
 Availability:
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:30369
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:31092


OVAL    2
oval:org.secpod.oval:def:30369
oval:org.secpod.oval:def:31092

© SecPod Technologies