back to labs
Harden Mount Options
MediumStorage & LVM15-20 minThe brief
A security review flagged a data filesystem that is mounted with default options: user-writable areas should not allow executables, set-user-ID binaries, or device nodes. The mount is already in /etc/fstab. Read /root/case/assignment.env for the mount point (MOUNT_POINT), then harden that fstab entry by adding the noexec, nosuid, and nodev options to it — without removing the existing options. Grading reads the durable fstab entry (what a remount or reboot would honour).
What you'll do
- Locate the fstab entry for the assigned mount point
- Add noexec, nosuid, and nodev to its mount options
- Keep the existing options intact
Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.