✎ 1.1.1.2 Ensure mounting of freevxfs filesystems is disabled (Scored) [SecScan]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== 1.1.1.2 Ensure mounting of freevxfs filesystems is disabled (Scored)======
=====Profile Applicability=====  
<code>
Level 1 - Server 
Level 1 - Workstation
</code>

=====Description=====
The ''freevxfs'' filesystem type is a free version of the Veritas type filesystem. This is the primary filesystem type for HP-UX operating systems.

=====Rationale=====
Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is not needed, disable it.

=====Audit===== 
Run the following commands and verify the output is as indicated: \\ 
<Code:bash>
# modprobe -n -v freevxfs
install /bin/true 
# lsmod | grep freevxfs 
<No output>
</Code>

=====Remediation===== 
Edit or create the file ''/etc/modprobe.d/CIS.conf'' and add the following line: \\
<Code:bash>
install freevxfs /bin/true
</Code>