The SUSE operating system must disable the file system automounter unless required.
An XCCDF Rule
Description
Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity. Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163, SRG-OS-000480-GPOS-00227
- ID
- SV-217156r958498_rule
- Version
- SLES-12-010590
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the SUSE operating system to disable the ability to automount devices.
Turn off the automount service with the following command:
# systemctl stop autofs
# systemctl disable autofs