Add nodev Option to /dev/shm
An XCCDF Rule
Description
The nodev mount option can be used to prevent creation of device
files in /dev/shm. Legitimate character and block devices should
not exist within temporary directories like /dev/shm.
Add the nodev option to the list of
Options in the systemd.mount unit that
controls mounting of
/dev/shm.
Rationale
The only legitimate location for device files is the /dev directory
located on the root partition. The only exception to this is chroot jails.
- ID
- xccdf_org.ssgproject.content_rule_mount_option_dev_shm_nodev
- Severity
- Medium
- References
- Updated