Remote file systems must be mounted with the "nosuid" option.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
RHEL-06-000270	RHEL-06-000270	RHEL-06-000270_rule		Medium

Description
NFS mounts should not present suid binaries to users. Only vendor-supplied suid executables should be installed to their default location on the local filesystem.

STIG	Date
Red Hat Enterprise Linux 6 Security Technical Implementation Guide	2013-02-05

Details

Check Text ( C-RHEL-06-000270_chk )
To verify the "nosuid" option is configured for all NFS mounts, run the following command: $ mount | grep nfs All NFS mounts should show the "nosuid" setting in parentheses. If the setting does not show, this is a finding.

Fix Text (F-RHEL-06-000270_fix)
Add the "nosuid" option to the fourth column of "/etc/fstab" for the line which controls mounting of any NFS mounts.