lynis
lynis copied to clipboard
Improper filesystem check of /dev/shm
Is your feature request related to a problem? Please describe.
include/tests_filesystems checks if /dev/shm is mounted with noexec
option; however, having noexec
option set prevents running User Mode Linux
kernel;
Checking if /dev/shm is on tmpfs...OK
Checking PROT_EXEC mmap in /dev/shm...Operation not permitted
/dev/shm must be not mounted noexec
Describe the solution you'd like
Remove noexec
option check for /dev/shm as such:
FILESYSTEMS_TO_CHECK="/boot:nodev,noexec,nosuid /dev:noexec,nosuid /dev/shm:nosuid,nodev ...
Required changes Just include/tests_filesystems file.
Hi @j75 and thanks for opening this issue, it seems however that the check is correct but setting noexec
will prevents running User Mode Linux
kernel.
My suggesting is that you simple ignore the check and accept the resultat as expected configuration.