Export Filesystems Read-Only if Possible
An XCCDF Group
Description
If a filesystem is being exported so that users can view the files in a convenient
fashion, but there is no need for users to edit those files, exporting the filesystem read-only
removes an attack vector against the server. The default filesystem export mode is ro
,
so do not specify rw
without a good reason.
- ID
- xccdf_org.ssgproject.content_group_export_filesystems_read_only
- Child Items
- Updated