Configure the "Support for hfs filesystems" setting to organizational standards.

Back

CONTROL ID
08767

CONTROL TYPE
Establish/Maintain Documentation

CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS

This Control directly supports the implied Control(s):

Configure Red Hat Enterprise Linux to Organizational Standards., CC ID: 08713

There are no implementation support Controls.

SELECTED AUTHORITY DOCUMENTS COMPLIED WITH

Title: Disable Mounting of hfs Filesystems Description: The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is not neede… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.21_Disable_Mounting_of_hfs_Filesystems Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.21.1_, The Center for Internet Security CentOS 6 Level 2 Benchmark, 1.0.0)
Title: Disable Mounting of hfs Filesystems Description: The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is not neede… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.21_Disable_Mounting_of_hfs_Filesystems Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.21.2_, The Center for Internet Security CentOS 6 Level 2 Benchmark, 1.0.0)
Title: Disable Mounting of hfs Filesystems Description: The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is not nee… (Rule:xccdf_org.cisecurity.benchmarks_rule_1.1.21_Disable_Mounting_of_hfs_Filesystems Artifact Expression:xccdf_org.cisecurity.benchmarks_ae_1.1.21.1_, The Center for Internet Security Red Hat Enterprise Linux 6 Level 2 Benchmark, 1.2.0)
Title: Disable Mounting of hfs Filesystems Description: The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is not nee… (Rule:xccdf_org.cisecurity.benchmarks_rule_1.1.21_Disable_Mounting_of_hfs_Filesystems Artifact Expression:xccdf_org.cisecurity.benchmarks_ae_1.1.21.2_, The Center for Internet Security Red Hat Enterprise Linux 6 Level 2 Benchmark, 1.2.0)
Title: Disable Mounting of hfs Filesystems Description: The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is n… (Rule: xccdf_org.cisecurity.benchmarks_rule_2.21_Disable_Mounting_of_hfs_Filesystems Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_2.21.1_, The Center for Internet Security Ubuntu 12.04 LTS Level 2 Benchmark, v1.0.0)
Title: Disable Mounting of hfs Filesystems Description: The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is n… (Rule: xccdf_org.cisecurity.benchmarks_rule_2.21_Disable_Mounting_of_hfs_Filesystems Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_2.21.2_, The Center for Internet Security Ubuntu 12.04 LTS Level 2 Benchmark, v1.0.0)
Support for hfs filesystems should be enabeld or disabled as appropriate. Technical Mechanisms: (1) via /etc/modprobe.conf (2) via configuration file in /etc/modprobe.d (3) via MODPROBE_OPTIONS environment variable Parameters: enabled / disabled References: Section: 2.2.2.5 - Disable M… (CCE-15087-0, Common Configuration Enumeration List, Combined XML: Red Hat Enterprise Linux 5, 5.20130214)