Skip to content

Add nodev Option to /var/tmp

An XCCDF Rule

Description

The nodev mount option can be used to prevent device files from being created in /var/tmp. Legitimate character and block devices should not exist within temporary directories like /var/tmp. Add the nodev option to the list of Options in the systemd.mount unit that controls mounting of /var/tmp.

Rationale

The only legitimate location for device files is the /dev directory located on the root partition. The only exception to this is chroot jails.

ID
xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nodev
Severity
Medium
References
Updated