The Red Hat Enterprise Linux operating system must disable the file system automounter unless required.
An XCCDF Rule
Description
Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity. Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163, SRG-OS-000480-GPOS-00227
- ID
- SV-204451r853893_rule
- Version
- RHEL-07-020110
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the operating system to disable the ability to automount devices.
Turn off the automount service with the following commands:
# systemctl stop autofs
# systemctl disable autofs