DLPX-86541 CIS: /dev/shm filesystem and mount options

PR URL: https://www.github.com/delphix/delphix-platform/pull/493
delphix · Sep 12, 2024 · c42386a · c42386a
1 parent ade7e87
commit c42386a
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/...ar/lib/delphix-platform/ansible/10-delphix-platform/roles/delphix-platform/tasks/main.yml b/...ar/lib/delphix-platform/ansible/10-delphix-platform/roles/delphix-platform/tasks/main.yml
@@ -706,6 +706,13 @@
       # Set default umask value.
       umask 027
 
+- posix.mount:
+    path: /dev/shm
+    src: tmpfs
+    fstype: tmpfs
+    opts: defaults,noexec,nosuid,nodev
+    state: mounted
+
 - service:
     name: "nullmailer"
     state: "stopped"