Add nodev Option to /var/tmp
An XCCDF Rule
Description
The nodev
mount option can be used to prevent device files from
being created in /var/tmp
. Legitimate character and block devices
should not exist within temporary directories like /var/tmp
.
Add the nodev
option to the list of
Options
in the systemd.mount
unit that
controls mounting of
/var/tmp
.
Rationale
The only legitimate location for device files is the /dev
directory
located on the root partition. The only exception to this is chroot jails.
- ID
- xccdf_org.ssgproject.content_rule_mount_option_var_tmp_nodev
- Severity
- Medium
- References
- Updated