Signed-off-by: David Smith dsmith@eclipse.ncsc.mil --- RHEL6/input/services/nfs.xml | 6 ++++-- 1 files changed, 4 insertions(+), 2 deletions(-)
diff --git a/RHEL6/input/services/nfs.xml b/RHEL6/input/services/nfs.xml index 1dec65d..4308d78 100644 --- a/RHEL6/input/services/nfs.xml +++ b/RHEL6/input/services/nfs.xml @@ -347,7 +347,8 @@ server.</description> <ocil clause="the setting does not show"> To verify the <tt>nodev</tt> option is configured for all NFS mounts, run the following command: <pre>$ mount | grep nfs</pre> -All NFS mounts should show the <tt>nodev</tt> setting in parentheses. +All NFS mounts should show the <tt>nodev</tt> setting in parentheses. This is not applicable if NFS is +not implemented. </ocil> <rationale>Legitimate device files should only exist in the /dev directory. NFS mounts should not present device files to users.</rationale> @@ -364,7 +365,8 @@ should not present device files to users.</rationale> <ocil clause="the setting does not show"> To verify the <tt>nosuid</tt> option is configured for all NFS mounts, run the following command: <pre>$ mount | grep nfs</pre> -All NFS mounts should show the <tt>nosuid</tt> setting in parentheses. +All NFS mounts should show the <tt>nosuid</tt> setting in parentheses. This is not applicable if NFS is +not implemented. </ocil> <rationale>NFS mounts should not present suid binaries to users. Only vendor-supplied suid executables should be installed to their default location on the local filesystem.</rationale>