STIGQter: STIG Summary: Nutanix Acropolis GPOS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix OS must mount /dev/shm with secure options.

DISA Rule

SV-279587r1192454_rule

Vulnerability Number

V-279587

Group Title

SRG-OS-000368-GPOS-00154

Rule Version

NXAC-OS-000136

Severity

CAT II

CCI(s)

• CCI-001764 - Prevent program execution in accordance with organization-defined policies, rules of behavior, and/or access agreements regarding software program usage and restrictions; rules authorizing the terms and conditions of software program usage.

Weight

10

Fix Recommendation

Nutanix OS is designed and engineered to have mount option preconfigured by default and changes are not supported. If any mount options are found, then some corruption has occurred and the OS must be rebuilt.

Check Contents

Verify in Nutanix OS that the "nodev","nosuid", and "noexec" options are configured for /dev/shm using the following command.

$ cat /etc/fstab | grep /dev/shm
tmpfs /dev/shm tmpfs defaults,size=512m,noexec,rw,seclabel,nosuid,nodev 0 0

If /dev/shm is mounted without secure options "nodev", "nosuid", and "noexec", this is a finding.

Vulnerability Number

V-279587

Documentable

False

Rule Version

NXAC-OS-000136

Severity Override Guidance

Verify in Nutanix OS that the "nodev","nosuid", and "noexec" options are configured for /dev/shm using the following command.

$ cat /etc/fstab | grep /dev/shm
tmpfs /dev/shm tmpfs defaults,size=512m,noexec,rw,seclabel,nosuid,nodev 0 0

If /dev/shm is mounted without secure options "nodev", "nosuid", and "noexec", this is a finding.

Check Content Reference

M

Target Key

5730