Rotate your device back to portrait to use STIG Vault.
The Oracle Linux 6 Security Technical Implementation Guide (V2 R7) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.
Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Rule Text
Discussion Text
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.
To verify insecure file locking has been disabled, run the following command:
# grep insecure_locks /etc/exports
If there is output, this is a finding.
By default the NFS server requires secure file-lock requests, which require credentials from the client in order to lock a file. Most NFS clients send credentials with file lock requests, however, there are a few clients that do not send credentials when requesting a file-lock, allowing the client to only be able to lock world-readable files.
To get around this, the "insecure_locks" option can be used so these clients can access the desired export.
This poses a security risk by potentially allowing the client access to data for which it does not have authorization.
Remove any instances of the "insecure_locks" option from the file "/etc/exports".