lynis icon indicating copy to clipboard operation
lynis copied to clipboard

Improper filesystem check of /dev/shm

Open j75 opened this issue 2 years ago • 1 comments

Is your feature request related to a problem? Please describe. include/tests_filesystems checks if /dev/shm is mounted with noexec option; however, having noexec option set prevents running User Mode Linux kernel;

Checking if /dev/shm is on tmpfs...OK
Checking PROT_EXEC mmap in /dev/shm...Operation not permitted
/dev/shm must be not mounted noexec 

Describe the solution you'd like Remove noexec option check for /dev/shm as such:

FILESYSTEMS_TO_CHECK="/boot:nodev,noexec,nosuid /dev:noexec,nosuid /dev/shm:nosuid,nodev ...

Required changes Just include/tests_filesystems file.

j75 avatar Dec 19 '21 21:12 j75

Hi @j75 and thanks for opening this issue, it seems however that the check is correct but setting noexec will prevents running User Mode Linux kernel.

My suggesting is that you simple ignore the check and accept the resultat as expected configuration.

konstruktoid avatar Dec 20 '21 09:12 konstruktoid