mount_options.csv

# format:
# <mount_point>,<mount_option>[,create_fstab_entry_if_needed,<fileystem>,<type>]
# - mount point mounted with specified option. for more than
#     one option, use multiple lines with the same <mount_point>, use the 
#     variable name (i.e. name beginning with var_, without the leading
#     '$' to reference a variable, e.g. var_removable_partition,nodev)
#  If the remediation can create (i.e. not just modify) an /etc/fstab line,
#  add the 'create_fstab_entry_if_needed' literal string as the third argument,
#  followed by filesystem and type of the mount_point.

/dev/shm,nodev,create_fstab_entry_if_needed,tmpfs,tmpfs #except-for:anaconda
/dev/shm,noexec,create_fstab_entry_if_needed,tmpfs,tmpfs #except-for:anaconda
/dev/shm,nosuid,create_fstab_entry_if_needed,tmpfs,tmpfs #except-for:anaconda
# /tmp is mounted as tmpfs by default by systemd (and thus not in fstab)
/tmp,nodev,create_fstab_entry_if_needed,tmpfs,tmpfs #except-for:anaconda
/tmp,noexec,create_fstab_entry_if_needed,tmpfs,tmpfs #except-for:anaconda
/tmp,nosuid,create_fstab_entry_if_needed,tmpfs,tmpfs #except-for:anaconda
/home,nosuid
/home,nodev
/var,nodev
/var/tmp,nodev
/var/tmp,noexec
/var/tmp,nosuid
/var/log,nodev
/var/log,noexec
/var/log,nosuid
/var/log/audit,nodev
/var/log/audit,noexec
/var/log/audit,nosuid
/boot,nodev
/boot,nosuid