openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/source/developer-notes/V-57569.rst
Major Hayden a399061cab V-3865{2,4}, V-57569: Mounting filesystems 
Implements: blueprint security-hardening

Change-Id: I490ee1d330e2bc0e47321a3c0e8340470ec7d865
2015-10-07 17:30:08 -05:00

271 B
Raw Blame History

Exception

Altering partitions and how they are mounted is left up to the deployer to configure during the OS installation process. Mounting /tmp/ with the noexec option is highly recommended to prevent scripts or binaries from being executed from /tmp.