How long does the integration take?

Change one base URL in an OpenAI-compatible client, or install the Python or TypeScript SDK; the quickstart routes a first request in a few minutes.

Will this lock us into another vendor?

No. The router is Apache-2.0 open source, your provider keys stay yours, and the API is OpenAI-compatible, so leaving is a change of base URL.

What happens when a provider fails?

The router falls back to the next model your policy allows and records the fallback in the trace, so an outage costs a retry, not an incident.

CIS Ubuntu 14.04 LTS - 1.1.9 Ensure noexec option set on /var/tmp partition - Skill

Name: CIS Ubuntu 14.04 LTS - 1.1.9 Ensure noexec option set on /var/tmp partition
Author: nadamohamed14796-byte

Imported from nadamohamed14796-byte/cyber-strike (.cyberstrike/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-linux-14-04-lts-benchmark-v2/cis-ubuntu1404-v210-1-1-9/SKILL.md). Install upstream with npx skills add nadamohamed14796-byte/cyber-strike --skill cis-ubuntu1404-v210-1-1-9. Copyright stays with the author.

1.1.9 Ensure noexec option set on /var/tmp partition (Scored)

Profile Applicability

Level 1 - Server
Level 1 - Workstation

Description

The noexec mount option specifies that the filesystem cannot contain executable binaries.

Rationale

Since the /var/tmp filesystem is only intended for temporary file storage, set this option to ensure that users cannot run executable binaries from /var/tmp.

Audit Procedure

mount | grep /var/tmp
# Verify that the noexec option is set on /var/tmp
# Expected output: tmpfs on /var/tmp type tmpfs (rw,nosuid,nodev,noexec,relatime)

Expected Result

The output should show the noexec option is set for the /var/tmp partition.

Remediation

# Edit the /etc/fstab file and add noexec to the fourth field (mounting options)
# for the /var/tmp partition. See the fstab(5) manual page for more information.

# Run the following command to remount /var/tmp:
mount -o remount,noexec /var/tmp

Default Value

By default, the noexec option is not set on /var/tmp.

References

CIS Ubuntu Linux 14.04 LTS Benchmark v2.1.0
CIS Controls: 2 Inventory of Authorized and Unauthorized Software

Profile

Level 1

Install CIS Ubuntu 14.04 LTS - 1.1.9 Ensure noexec option set on /var/tmp partition and it becomes one more candidate the router can pick - when it fits.

A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.

{ "ocm": "1", "id": "nadamohamed14796-byte-cyber-strike-cis-ubuntu1404-v210-1-1-9", "kind": "skill", "name": "CIS Ubuntu 14.04 LTS - 1.1.9 Ensure noexec option set on /var/tmp partition", "description": "Ensure noexec option is set on /var/tmp partition to prevent executable binaries", "publisher": "nadamohamed14796-byte", "version": "1.0.0", "capabilities": { "domains": [ "general" ], "tags": [ "skill-md", "cis", "ubuntu", "ubuntu-14-04", "level-1", "scored", "filesystem", "github" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Ensure noexec option is set on /var/tmp partition to prevent executable binaries" ], "primary": false, "metadata": { "source": { "provider": "github", "repository": "https://github.com/nadamohamed14796-byte/cyber-strike", "path": ".cyberstrike/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-linux-14-04-lts-benchmark-v2/cis-ubuntu1404-v210-1-1-9/SKILL.md", "ref": "5df2faed343568963ef3d7cf7833bfa52e814fce", "url": "https://github.com/nadamohamed14796-byte/cyber-strike/blob/5df2faed343568963ef3d7cf7833bfa52e814fce/.cyberstrike/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-linux-14-04-lts-benchmark-v2/cis-ubuntu1404-v210-1-1-9/SKILL.md", "key": "nadamohamed14796-byte/cyber-strike/.cyberstrike/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-linux-14-04-lts-benchmark-v2/cis-ubuntu1404-v210-1-1-9/SKILL.md" } }, "instructions": "# 1.1.9 Ensure noexec option set on /var/tmp partition (Scored)\n\n## Profile Applicability\n\n- Level 1 - Server\n- Level 1 - Workstation\n\n## Description\n\nThe noexec mount option specifies that the filesystem cannot contain executable binaries.\n\n## Rationale\n\nSince the /var/tmp filesystem is only intended for temporary file storage, set this option to ensure that users cannot run executable binaries from /var/tmp.\n\n## Audit Procedure\n\n```bash\nmount | grep /var/tmp\n# Verify that the noexec option is set on /var/tmp\n# Expected output: tmpfs on /var/tmp type tmpfs (rw,nosuid,nodev,noexec,relatime)\n``", "cost": { "context_tokens": 300 } }

CIS Ubuntu 14.04 LTS - 1.1.9 Ensure noexec option set on /var/tmp partition

About

1.1.9 Ensure noexec option set on /var/tmp partition (Scored)

Profile Applicability

Description

Rationale

Audit Procedure

Expected Result

Remediation

Default Value

References

Profile

Install CIS Ubuntu 14.04 LTS - 1.1.9 Ensure noexec option set on /var/tmp partition and it becomes one more candidate the router can pick - when it fits.

What it costs to adopt - in engineering time.

One base URL

No vendor lock-in

Failover built in

Use it

Manifest

Reviews