Add nodev Option to /tmp
An XCCDF Rule
Description
The nodev mount option can be used to prevent device files from
being created in /tmp. Legitimate character and block devices
should not exist within temporary directories like /tmp.
Add the nodev option to the list of
Options in the systemd.mount unit that
controls mounting of
/tmp.
Rationale
The only legitimate location for device files is the /dev directory
located on the root partition. The only exception to this is chroot jails.
- ID
- xccdf_org.ssgproject.content_rule_mount_option_tmp_nodev
- Severity
- Medium
- References
- Updated