Show pageOld revisionsBacklinksBack to top This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong. ====== 1.1.1.2 Ensure mounting of freevxfs filesystems is disabled (Scored)====== =====Profile Applicability===== <code> Level 1 - Server Level 1 - Workstation </code> =====Description===== The ''freevxfs'' filesystem type is a free version of the Veritas type filesystem. This is the primary filesystem type for HP-UX operating systems. =====Rationale===== Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is not needed, disable it. =====Audit===== Run the following commands and verify the output is as indicated: \\ <Code:bash> # modprobe -n -v freevxfs install /bin/true # lsmod | grep freevxfs <No output> </Code> =====Remediation===== Edit or create the file ''/etc/modprobe.d/CIS.conf'' and add the following line: \\ <Code:bash> install freevxfs /bin/true </Code> ubuntu1604/1/1/1/2.txt Last modified: 2017/05/02 13:48by Piotr Kłoczewski