Automated file system mounting tools must not be enabled unless needed.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-22577 | GEN008440 | SV-46045r1_rule | Low |
| Description |
|---|
| Automated file system mounting tools may provide unprivileged users with the ability to access local media and network shares. If this access is not necessary for the system’s operation, it must be disabled to reduce the risk of unauthorized access to these resources. |
| STIG | Date |
|---|---|
| SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide | 2018-09-19 |
Details
| Check Text ( C-43316r2_chk ) |
|---|
| Check if the autofs service is running. # rcautofs status OR # service autofs status If the service is running, this is a finding. |
| Fix Text (F-39404r1_fix) |
|---|
| Stop and disable the autofs service. # rcautofs stop OR # service autofs stop # insserv –r autofs OR # chkconfig autofs off |