Ensure filesystem integrity is regularly checked
Details Periodic checking of the filesystem integrity is needed to detect changes to the filesystem. Notes: The checking in this...
- Home
- Security Hardening
- CIS Debian Family Server L1 V1.0.0
CIS Debian Family Server L1 V1.0.0
Ensure GPG keys are configured
Details Most packages managers implement GPG key signing to verify package integrity during installation. Rationale: It is important to ensure...Ensure mounting of cramfs filesystems is disabled – lsmod
Details The cramfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems. A cramfs image can...Ensure mounting of cramfs filesystems is disabled – modprobe
Details The cramfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems. A cramfs image can...Ensure mounting of freevxfs filesystems is disabled – lsmod
Details The freevxfs filesystem type is a free version of the Veritas type filesystem. This is the primary filesystem type...Ensure mounting of freevxfs filesystems is disabled – modprobe
Details The freevxfs filesystem type is a free version of the Veritas type filesystem. This is the primary filesystem type...Ensure mounting of hfs filesystems is disabled – lsmod
Details The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Rationale: Removing support...Ensure mounting of hfs filesystems is disabled – modprobe
Details The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Rationale: Removing support...Ensure mounting of hfsplus filesystems is disabled – lsmod
Details The hfsplus filesystem type is a hierarchical filesystem designed to replace hfs that allows you to mount Mac OS...Ensure mounting of hfsplus filesystems is disabled – modprobe
Details The hfsplus filesystem type is a hierarchical filesystem designed to replace hfs that allows you to mount Mac OS...