Saltstack Official Linux Formula
您最多选择25个主题 主题必须以字母或数字开头,可以包含连字符 (-),并且长度不得超过35个字符

cis-1-1-1-2.yml 882B

123456789101112131415161718192021222324252627282930313233343536
  1. # 1.1.1.2 Ensure mounting of freevxfs filesystems is disabled
  2. #
  3. # Description
  4. # ===========
  5. # The freevxfs filesystem type is a free version of the Veritas type
  6. # filesystem. This is the primary filesystem type for HP-UX operating systems.
  7. #
  8. # Rationale
  9. # =========
  10. # Removing support for unneeded filesystem types reduces the local attack
  11. # surface of the system. If this filesystem type is not needed, disable it.
  12. #
  13. # Audit
  14. # =====
  15. # Run the following commands and verify the output is as indicated:
  16. #
  17. # # modprobe -n -v freevxfs
  18. # install /bin/true
  19. # # lsmod | grep freevxfs
  20. # <No output>
  21. #
  22. # Remediation
  23. # ===========
  24. # Edit or create the file /etc/modprobe.d/CIS.conf and add the following line:
  25. #
  26. # install freevxfs /bin/true
  27. #
  28. parameters:
  29. linux:
  30. system:
  31. kernel:
  32. module:
  33. freevxfs:
  34. install:
  35. command: /bin/true