Add noexec Option to Removable Media PartitionsID: oval:org.secpod.oval:def:26011 | Date: (C)2015-08-21 (M)2022-09-28 |
Class: COMPLIANCE | Family: unix |
The noexec mount option prevents the direct execution of binaries on the mounted filesystem. Users should not be allowed to execute binaries that exist on partitions mounted from removable media (such as a USB key). The noexec option prevents code from being executed directly from the media itself, and may therefore provide a line of defense against certain types of worms or malicious code.