Open rx294 opened 5 years ago
So, I agree with this but technically we should grab all user's home directories using getent passwd
and then check that whatever mount point they're on is proper. This will need to have an exclusion list for some users (root, etc...).
control "V-72041" title "File systems that contain user home directories must be mounted to prevent files with the setuid and setgid bit set from being executed."
from the control checktext:
Current test code does not cover this condition:
Proposed code: