Saltstack Official Linux Formula
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
|
- # 1.1.1.2 Ensure mounting of freevxfs filesystems is disabled
- #
- # Description
- # ===========
- # The freevxfs filesystem type is a free version of the Veritas type
- # filesystem. This is the primary filesystem type for HP-UX operating systems.
- #
- # Rationale
- # =========
- # Removing support for unneeded filesystem types reduces the local attack
- # surface of the system. If this filesystem type is not needed, disable it.
- #
- # Audit
- # =====
- # Run the following commands and verify the output is as indicated:
- #
- # # modprobe -n -v freevxfs
- # install /bin/true
- # # lsmod | grep freevxfs
- # <No output>
- #
- # Remediation
- # ===========
- # Edit or create the file /etc/modprobe.d/CIS.conf and add the following line:
- #
- # install freevxfs /bin/true
- #
- parameters:
- linux:
- system:
- kernel:
- module:
- freevxfs:
- install:
- command: /bin/true
|