back to labs
CIS: Secure /tmp and /dev/shm Mount Options
MediumLinux Security15-20 minThe brief
World-writable temp filesystems are a classic foothold. Per the CIS Benchmark, /tmp and /dev/shm must be mounted with nodev, nosuid, and noexec so attackers can't drop device nodes, setuid binaries, or executables there. Set those options on both entries in /etc/fstab. Grading reads the fstab mount options the way a CIS-CAT scan would.
What you'll do
- /tmp mounted with nodev, nosuid, noexec
- /dev/shm mounted with nodev, nosuid, noexec
Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.