[PATCH 8/9] Added -xdev to any find commands to prevent traversing remote filesystems.

Shawn Wells shawn at redhat.com
Fri Oct 26 21:44:19 UTC 2012


On 10/26/12 9:27 AM, Steinke, Leland J CTR DISA FSO (US) wrote:
> Perhaps the setuid file check should be run against local partitions that do not have the nosuid mount option?  See V-805 in the rhel5 content.

This is a good idea, and apparently someone agreed with you: V-165 in 
the rhel6 content
http://people.redhat.com/swells/scap-security-guide/RHEL6/output/table-rhel6-stig-server.html



More information about the scap-security-guide mailing list