SRG-OS-000368-GPOS-00154

The operating system must prevent program execution in accordance with local policies regarding software program usage and restrictions and/or rules authorizing the terms and conditions of software program usage.

Details
Associations

30 rules found Severity: Medium

14 rules found Severity: Medium

18 rules found Severity: Medium

20 rules found Severity: Medium

20 rules found

22 rules found Severity: Medium

18 rules found Severity: Medium

20 rules found Severity: Medium

21 rules found Severity: Medium

22 rules found Severity: Medium

16 rules found Severity: Medium

20 rules found Severity: Medium

16 rules found Severity: Medium

20 rules found Severity: Medium

22 rules found Severity: Medium

10 rules found Severity: Medium

9 rules found Severity: Medium

6 rules found Severity: Medium

10 rules found Severity: Medium

SRG-OS-000368-GPOS-00154

Add nodev Option to /dev/shm

Add nosuid Option to /dev/shm

Add nodev Option to /boot

Add nosuid Option to /boot

Add noexec Option to /dev/shm

Add nodev Option to /home

Add nosuid Option to /home

Add nodev Option to Non-Root Local Partitions

Add nodev Option to /tmp

Add noexec Option to /tmp

Add nosuid Option to /tmp

Add nodev Option to /var/log/audit

Add noexec Option to /var/log/audit

Add nosuid Option to /var/log/audit

Add nodev Option to /var/log

Add noexec Option to /var/log

Add nosuid Option to /var/log

Add nodev Option to /var

Add nodev Option to /var/tmp

Add noexec Option to /var/tmp

Add nosuid Option to /var/tmp

Install fapolicyd Package

Enable the File Access Policy Service

Configure Fapolicy Module to Employ a Deny-all, Permit-by-exception Policy to Allow the Execution of Authorized Software Programs.

Ensure AppArmor is installed