Details

autofs allows automatic mounting of devices, typically including CD/DVDs and USB drives.

*Rationale*

With automounting enabled anyone with physical access could attach a USB drive or disc

and have it’s contents available in system even if they lacked permissions to mount it

themselves.

Solution

Remove or comment out start lines in /etc/init/autofs.conf-#start on runlevel [2345]

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/91

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7b.
• CSCv6|9.1

Source

• Tenable.com/audits