Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
ubuntu1604:1:1:1:4 [2017/05/01 23:36]
Piotr Kłoczewski utworzono
ubuntu1604:1:1:1:4 [2017/05/02 11:59] (current)
Line 1: Line 1:
 ====== 1.1.1.4 Ensure mounting of hfs filesystems is disabled (Scored) ====== ====== 1.1.1.4 Ensure mounting of hfs filesystems is disabled (Scored) ======
-**Profile Applicability:** \\  +=====Profile Applicability=====   
-   +<code> 
-<note>Level 1 - Server ​\\  +Level 1 - Server  
-Level 1 - Workstation</​note>+Level 1 - Workstation 
 +</code>
  
-**Description:** \\  +=====Description===== 
-The ''​hfs''​ filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. ​\\ \\  +The ''​hfs''​ filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. 
-**Rationale:** \\  + 
-Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is not needed, disable it. \\ \\  +=====Rationale===== 
-**Audit:** \\ +Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is not needed, disable it. 
 + 
 +=====Audit===== 
 Run the following commands and verify the output is as indicated: \\  Run the following commands and verify the output is as indicated: \\ 
 <​Code:​bash>​ <​Code:​bash>​
Line 17: Line 20:
 <No output> <No output>
 </​Code>​ </​Code>​
-\\ + 
-**Remediation:** \\ +=====Remediation===== 
 Edit or create the file ''/​etc/​modprobe.d/​CIS.conf''​ and add the following line: \\ Edit or create the file ''/​etc/​modprobe.d/​CIS.conf''​ and add the following line: \\
 <​Code:​bash>​ <​Code:​bash>​
 install hfs /bin/true install hfs /bin/true
 </​Code>​ </​Code>​