Skip to content

Instantly share code, notes, and snippets.

@AfroThundr3007730

AfroThundr3007730/dev-shm-noexec.service

Last active January 22, 2022 20:24
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save AfroThundr3007730/cd9236c0dd88d743adb3d017f1d36237 to your computer and use it in GitHub Desktop.
Save AfroThundr3007730/cd9236c0dd88d743adb3d017f1d36237 to your computer and use it in GitHub Desktop.
Download ZIP
Remounts /dev/shm with noexec to satisfy STIG requirements
Raw
dev-shm-noexec.service
#/etc/systemd/system/dev-shm-noexec.service
[Unit]
Description=Remounts /dev/shm with noexec to satisfy STIG requirements
DefaultDependencies=false
[Service]
ExecStart=/bin/mount -o remount,nosuid /dev/shm
Type=oneshot
[Install]
WantedBy=local-fs.target
@AfroThundr3007730
Copy link
Author

As per this message on the Fedora mailing lists.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment