[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Ensure a separate partition exists for /tmp

ID: oval:org.secpod.oval:def:97443Date: (C)2024-02-05   (M)2024-04-23
Class: COMPLIANCEFamily: unix




The /tmp directory is a world-writable directory used for temporary storage by all users and some applications. Rationale: Making /tmp its own file system allows an administrator to set the noexec option on the mount, making /tmp useless for an attacker to install executable code. It would also prevent an attacker from establishing a hardlink to a system setuid program and wait for it to be updated. Once the program was updated, the hardlink would be broken and the attacker would have his own copy of the program.

Platform:
Oracle Linux 7
Reference:
CCE-55005-3
CPE    1
cpe:/o:oracle:linux:7
CCE    1
CCE-55005-3
XCCDF    1
xccdf_org.secpod_benchmark_general_OEL_7

© SecPod Technologies