Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
ubuntu1604:1:1:1:7 [2017/05/01 23:53]
Piotr Kłoczewski
ubuntu1604:1:1:1:7 [2017/05/02 12:03] (current)
Line 1: Line 1:
 ====== 1.1.1.7 Ensure mounting of udf filesystems is disabled (Scored) ====== ====== 1.1.1.7 Ensure mounting of udf filesystems is disabled (Scored) ======
-**Profile Applicability:** \\  +=====Profile Applicability=====   
-   +<code> 
-<note>Level 1 - Server ​\\  +Level 1 - Server  
-Level 1 - Workstation</​note+Level 1 - Workstation 
- +</code
-**Description:** \\  +=====Description===== 
-The ''​udf''​ filesystem type is the universal disk format used to implement ISO/IEC 13346 and ECMA-167 specifications. This is an open vendor filesystem type for data storage on a broad range of media. This filesystem type is necessary to support writing DVDs and newer optical disc formats. ​\\ \\  +The ''​udf''​ filesystem type is the universal disk format used to implement ISO/IEC 13346 and ECMA-167 specifications. This is an open vendor filesystem type for data storage on a broad range of media. This filesystem type is necessary to support writing DVDs and newer optical disc formats. 
-**Rationale:** \\  +=====Rationale===== 
-Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is not needed, disable it. \\ \\  +Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is not needed, disable it. 
-**Audit:** \\ +=====Audit===== 
 Run the following commands and verify the output is as indicated: \\  Run the following commands and verify the output is as indicated: \\ 
 <​Code:​bash>​ <​Code:​bash>​
Line 17: Line 17:
 <No output> <No output>
 </​Code>​ </​Code>​
-\\ +=====Remediation===== 
-**Remediation:** \\ +
 Edit or create the file ''/​etc/​modprobe.d/​CIS.conf''​ and add the following line: \\ Edit or create the file ''/​etc/​modprobe.d/​CIS.conf''​ and add the following line: \\
 <​Code:​bash>​ <​Code:​bash>​
 install udf /bin/true install udf /bin/true
 </​Code>​ </​Code>​