Ensure mounting of hfs filesystems is disabled – lsmod
Details The `hfs` filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Removing support for...
- Home
- Security Hardening
- CIS Amazon Linux V2.1.0 L1
CIS Amazon Linux V2.1.0 L1
Ensure mounting of hfsplus filesystems is disabled – /etc/modprobe.d/CIS.conf
Details Removing support for unneeded filesystem types reduces the local attack surface of the system. If this filesystem type is...Ensure mounting of hfsplus filesystems is disabled – lsmod
Details The `hfsplus` filesystem type is a hierarchical filesystem designed to replace `hfs` that allows you to mount Mac OS...Ensure mounting of jffs2 filesystems is disabled – /etc/modprobe.d/CIS.conf
Details Removing support for unneeded filesystem types reduces the local attack surface of the system. If this filesystem type is...Ensure mounting of jffs2 filesystems is disabled – lsmod
Details The `jffs2` (journaling flash filesystem 2) filesystem type is a log-structured filesystem used in flash memory devices. Removing support...Ensure mounting of squashfs filesystems is disabled – /etc/modprobe.d/CIS.conf
Details Removing support for unneeded filesystem types reduces the local attack surface of the system. If this filesystem type is...Ensure mounting of squashfs filesystems is disabled – lsmod
Details The `squashfs` filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems (similar to `cramfs` )....Ensure mounting of udf filesystems is disabled – /etc/modprobe.d/CIS.conf
Details Removing support for unneeded filesystem types reduces the local attack surface of the system. If this filesystem type is...Ensure mounting of udf filesystems is disabled – lsmod
Details The `udf` filesystem type is the universal disk format used to implement ISO/IEC 13346 and ECMA-167 specifications. This is...Ensure nodev option set on /dev/shm partition
Details Since the /dev/shm filesystem is not intended to support devices, set this option to ensure that users cannot attempt...