STIGQter: STIG Summary: Oracle Linux 8 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

OL 8 file systems that contain user home directories must not execute binary files.

DISA Rule

SV-248620r991589_rule

Vulnerability Number

V-248620

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

OL08-00-010590

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Configure the "/etc/fstab" to use the "noexec" option on file systems that contain user home directories for interactive users.

Check Contents

Verify that file systems containing user home directories are mounted with the "noexec" option.

Find the file system(s) that contain the user home directories with the following command:

$ sudo awk -F: '($3>=1000)&&($1!="nobody"){print $1,$3,$6}' /etc/passwd

smithj 1001 /home/smithj
robinst 1002 /home/robinst

Check the file systems that are mounted at boot time with the following command:

$ sudo more /etc/fstab

UUID=a411dc99-f2a1-4c87-9e05-184977be8539 /home ext4 rw,relatime,discard,data=ordered,nosuid,nodev,noexec 0 2

If a file system found in "/etc/fstab" refers to the user home directory file system and it does not have the "noexec" option set, this is a finding.

Vulnerability Number

V-248620

Documentable

False

Rule Version

OL08-00-010590

Severity Override Guidance

Check Content Reference

Target Key

5416