# 1.1.1.2 Ensure mounting of freevxfs filesystems is disabled # # Description # =========== # The freevxfs filesystem type is a free version of the Veritas type # filesystem. This is the primary filesystem type for HP-UX operating systems. # # Rationale # ========= # Removing support for unneeded filesystem types reduces the local attack # surface of the system. If this filesystem type is not needed, disable it. # # Audit # ===== # Run the following commands and verify the output is as indicated: # # # modprobe -n -v freevxfs # install /bin/true # # lsmod | grep freevxfs # # # Remediation # =========== # Edit or create the file /etc/modprobe.d/CIS.conf and add the following line: # # install freevxfs /bin/true # parameters: linux: system: kernel: module: freevxfs: install: command: /bin/true