Details
The squashfs filesystem type is a compressed read-only Linux filesystem embedded in
small footprint systems (similar to cramfs ). A squashfs image can be used without having
to first decompress the image.
Rationale:
Removing support for unneeded filesystem types reduces the local attack surface of the
system. If this filesystem type is not needed, disable it.
Solution
Edit or create a file in the /etc/modprobe.d/ directory ending in .conf
Example: vim /etc/modprobe.d/squashfs.conf
and add the following line:
install squashfs /bin/true
Run the following command to unload the squashfs module:
# rmmod squashfs
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.