Ensure mounting of hfsplus filesystems is disabled – lsmod
Details The hfsplus filesystem type is a hierarchical filesystem designed to replace hfs that allows you to mount Mac OS...
- Home
- Security Hardening
- CIS Ubuntu Linux 18.04 LXD Host L1 Workstation V1.0.0
CIS Ubuntu Linux 18.04 LXD Host L1 Workstation V1.0.0
Ensure mounting of hfsplus filesystems is disabled – modprobe
Details The hfsplus filesystem type is a hierarchical filesystem designed to replace hfs that allows you to mount Mac OS...Ensure mounting of jffs2 filesystems is disabled – lsmod
Details The jffs2 (journaling flash filesystem 2) filesystem type is a log-structured filesystem used in flash memory devices. Rationale: Removing...Ensure mounting of jffs2 filesystems is disabled – modprobe
Details The jffs2 (journaling flash filesystem 2) filesystem type is a log-structured filesystem used in flash memory devices. Rationale: Removing...Ensure mounting of squashfs filesystems is disabled – lsmod
Details The squashfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems (similar to cramfs )....Ensure mounting of squashfs filesystems is disabled – modprobe
Details The squashfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems (similar to cramfs )....Ensure mounting of udf filesystems is disabled – lsmod
Details The udf filesystem type is the universal disk format used to implement ISO/IEC 13346 and ECMA-167 specifications. This is...Ensure mounting of udf filesystems is disabled – modprobe
Details The udf filesystem type is the universal disk format used to implement ISO/IEC 13346 and ECMA-167 specifications. This is...Ensure nodev option set on /dev/shm partition
Details The nodev mount option specifies that the filesystem cannot contain special devices. Rationale: Since the /dev/shm filesystem is not...Ensure nodev option set on /home partition
Details The nodev mount option specifies that the filesystem cannot contain special devices. Rationale: Since the user partitions are not...