Skip to content

Export Filesystems Read-Only if Possible

An XCCDF Group

Description

If a filesystem is being exported so that users can view the files in a convenient fashion, but there is no need for users to edit those files, exporting the filesystem read-only removes an attack vector against the server. The default filesystem export mode is ro, so do not specify rw without a good reason.

ID
xccdf_org.ssgproject.content_group_export_filesystems_read_only
Child Items
Updated