1.1.2.2.2.sh

#!/usr/bin/env bash

# CIS 1.1.2.2.2 Ensure nodev option set on /dev/shm partition

TARGET="/dev/shm"
STATUS=""
REASON=""

# Step 1: Check if module exists on disk
if [ ! -d "$TARGET" ]; then
    STATUS=Failed
    REASON="/dev/shm does not exist"
    echo "$STATUS | $REASON"
    exit 1
fi

# Step 2: Check if module is loaded
if ! findmnt -kn "$TARGET" >/dev/null 2>&1; then
    STATUS=Failed
    REASON="/dev/shm is not mounted"
    echo "$STATUS | $REASON"
    exit 1
fi

# Step 3: Check configuration
if findmnt -kn /dev/shm -o OPTIONS | grep -vq nodev; then
    STATUS=Failed
    REASON="nodev option is not set on /dev/shm"
    echo "$STATUS | $REASON"
    exit 1
fi

# Final pass
STATUS=Passed
echo "$STATUS |"
exit 0