Back

Configure the "Support for hfsplus filesystems" setting to organizational standards.


CONTROL ID
08768
CONTROL TYPE
Establish/Maintain Documentation
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS




This Control directly supports the implied Control(s):
  • Configure Red Hat Enterprise Linux to Organizational Standards., CC ID: 08713

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH




  • Title: Disable Mounting of hfsplus Filesystems Description: The hfsplus filesystem type is a hierarchical filesystem designed to replace hfs that allows you to mount Mac OS filesystems. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If t… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.22_Disable_Mounting_of_hfsplus_Filesystems Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.22.1_, The Center for Internet Security CentOS 6 Level 2 Benchmark, 1.0.0)
  • Title: Disable Mounting of hfsplus Filesystems Description: The hfsplus filesystem type is a hierarchical filesystem designed to replace hfs that allows you to mount Mac OS filesystems. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If t… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.22_Disable_Mounting_of_hfsplus_Filesystems Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.22.2_, The Center for Internet Security CentOS 6 Level 2 Benchmark, 1.0.0)
  • Title: Disable Mounting of hfsplus Filesystems Description: The hfsplus filesystem type is a hierarchical filesystem designed to replace hfs that allows you to mount Mac OS filesystems. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If… (Rule:xccdf_org.cisecurity.benchmarks_rule_1.1.22_Disable_Mounting_of_hfsplus_Filesystems Artifact Expression:xccdf_org.cisecurity.benchmarks_ae_1.1.22.1_, The Center for Internet Security Red Hat Enterprise Linux 6 Level 2 Benchmark, 1.2.0)
  • Title: Disable Mounting of hfsplus Filesystems Description: The hfsplus filesystem type is a hierarchical filesystem designed to replace hfs that allows you to mount Mac OS filesystems. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If… (Rule:xccdf_org.cisecurity.benchmarks_rule_1.1.22_Disable_Mounting_of_hfsplus_Filesystems Artifact Expression:xccdf_org.cisecurity.benchmarks_ae_1.1.22.2_, The Center for Internet Security Red Hat Enterprise Linux 6 Level 2 Benchmark, 1.2.0)
  • Title: Disable Mounting of hfsplus Filesystems Description: The hfsplus filesystem type is a hierarchical filesystem designed to replace hfs that allows you to mount Mac OS filesystems. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the serv… (Rule: xccdf_org.cisecurity.benchmarks_rule_2.22_Disable_Mounting_of_hfsplus_Filesystems Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_2.22.1_, The Center for Internet Security Ubuntu 12.04 LTS Level 2 Benchmark, v1.0.0)
  • Title: Disable Mounting of hfsplus Filesystems Description: The hfsplus filesystem type is a hierarchical filesystem designed to replace hfs that allows you to mount Mac OS filesystems. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the serv… (Rule: xccdf_org.cisecurity.benchmarks_rule_2.22_Disable_Mounting_of_hfsplus_Filesystems Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_2.22.2_, The Center for Internet Security Ubuntu 12.04 LTS Level 2 Benchmark, v1.0.0)
  • Support for hfsplus filesystems should be enabeld or disabled as appropriate. Technical Mechanisms: (1) via /etc/modprobe.conf (2) via configuration file in /etc/modprobe.d (3) via MODPROBE_OPTIONS environment variable Parameters: enabled / disabled References: Section: 2.2.2.5 - Disab… (CCE-14093-9, Common Configuration Enumeration List, Combined XML: Red Hat Enterprise Linux 5, 5.20130214)