openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/source/developer-notes/V-38655.rst
Major Hayden 51b147451e V-38655: Mount w/noexec exception [docs only] 
Implements: blueprint security-hardening

Change-Id: Ice9dbd1cb2e88bf1b733d1447cff4aaa1bdff37f
2015-10-14 16:12:59 +00:00

451 B
Raw Blame History

Exception

Neither Ubuntu nor openstack-ansible will configure any removable media mounts by default. Deploys are strongly urged to mount any additional disks with the noexec mount option set.

For more information about the noexec mount option, review this good answer from a ServerFault user about noexec.