Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Guide to the Secure Configuration of Red Hat Enterprise Linux 7
System Settings
File Permissions and Masks
Restrict Dynamic Mounting and Unmounting of Filesystems
Disable Mounting of cramfs
Disable Mounting of cramfs
An XCCDF Rule
Details
Profiles
Prose
Disable Mounting of cramfs
Low Severity
To configure the system to prevent the
cramfs
kernel module from being loaded, add the following line to the file
/etc/modprobe.d/cramfs.conf
:
install cramfs /bin/true
To configure the system to prevent the
cramfs
from being used, add the following line to file
/etc/modprobe.d/cramfs.conf
:
blacklist cramfs
This effectively prevents usage of this uncommon filesystem. The
cramfs
filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems. A
cramfs
image can be used without having to first decompress the image.