Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
ubuntu1604:1:1:1:7 [2017/05/02 01:53] Piotr Kłoczewskiubuntu1604:1:1:1:7 [2017/05/02 14:03] (current) – external edit 127.0.0.1
Line 1: Line 1:
 ====== 1.1.1.7 Ensure mounting of udf filesystems is disabled (Scored) ====== ====== 1.1.1.7 Ensure mounting of udf filesystems is disabled (Scored) ======
-**Profile Applicability:** \\  +=====Profile Applicability=====   
-   +<code> 
-<note>Level 1 - Server \\  +Level 1 - Server  
-Level 1 - Workstation</note+Level 1 - Workstation 
- +</code
-**Description:** \\  +=====Description===== 
-The ''udf'' filesystem type is the universal disk format used to implement ISO/IEC 13346 and ECMA-167 specifications. This is an open vendor filesystem type for data storage on a broad range of media. This filesystem type is necessary to support writing DVDs and newer optical disc formats. \\ \\  +The ''udf'' filesystem type is the universal disk format used to implement ISO/IEC 13346 and ECMA-167 specifications. This is an open vendor filesystem type for data storage on a broad range of media. This filesystem type is necessary to support writing DVDs and newer optical disc formats. 
-**Rationale:** \\  +=====Rationale===== 
-Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is not needed, disable it. \\ \\  +Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is not needed, disable it. 
-**Audit:** \\ +=====Audit===== 
 Run the following commands and verify the output is as indicated: \\  Run the following commands and verify the output is as indicated: \\ 
 <Code:bash> <Code:bash>
Line 17: Line 17:
 <No output> <No output>
 </Code> </Code>
-\\ +=====Remediation===== 
-**Remediation:** \\ +
 Edit or create the file ''/etc/modprobe.d/CIS.conf'' and add the following line: \\ Edit or create the file ''/etc/modprobe.d/CIS.conf'' and add the following line: \\
 <Code:bash> <Code:bash>
 install udf /bin/true install udf /bin/true
 </Code> </Code>
  • ubuntu1604/1/1/1/7.txt
  • Last modified: 2017/05/02 14:03
  • by 127.0.0.1