Configure the "Support for jffs2 filesystems" setting to organizational standards.

Back

CONTROL ID
08769

CONTROL TYPE
Establish/Maintain Documentation

CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS

This Control directly supports the implied Control(s):

Configure Red Hat Enterprise Linux to Organizational Standards., CC ID: 08713

There are no implementation support Controls.

SELECTED AUTHORITY DOCUMENTS COMPLIED WITH

Title: Disable Mounting of jffs2 Filesystems Description: The jffs2 (journaling flash filesystem 2) filesystem type is a log-structured filesystem used in flash memory devices. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If this files… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.20_Disable_Mounting_of_jffs2_Filesystems Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.20.1_, The Center for Internet Security CentOS 6 Level 2 Benchmark, 1.0.0)
Title: Disable Mounting of jffs2 Filesystems Description: The jffs2 (journaling flash filesystem 2) filesystem type is a log-structured filesystem used in flash memory devices. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If this files… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.20_Disable_Mounting_of_jffs2_Filesystems Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.20.2_, The Center for Internet Security CentOS 6 Level 2 Benchmark, 1.0.0)
Title: Disable Mounting of jffs2 Filesystems Description: The jffs2 (journaling flash filesystem 2) filesystem type is a log-structured filesystem used in flash memory devices. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If this fil… (Rule:xccdf_org.cisecurity.benchmarks_rule_1.1.20_Disable_Mounting_of_jffs2_Filesystems Artifact Expression:xccdf_org.cisecurity.benchmarks_ae_1.1.20.1_, The Center for Internet Security Red Hat Enterprise Linux 6 Level 2 Benchmark, 1.2.0)
Title: Disable Mounting of jffs2 Filesystems Description: The jffs2 (journaling flash filesystem 2) filesystem type is a log-structured filesystem used in flash memory devices. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If this fil… (Rule:xccdf_org.cisecurity.benchmarks_rule_1.1.20_Disable_Mounting_of_jffs2_Filesystems Artifact Expression:xccdf_org.cisecurity.benchmarks_ae_1.1.20.2_, The Center for Internet Security Red Hat Enterprise Linux 6 Level 2 Benchmark, 1.2.0)
Title: Disable Mounting of jffs2 Filesystems Description: The jffs2 (journaling flash filesystem 2) filesystem type is a log-structured filesystem used in flash memory devices. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If th… (Rule: xccdf_org.cisecurity.benchmarks_rule_2.20_Disable_Mounting_of_jffs2_Filesystems Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_2.20.1_, The Center for Internet Security Ubuntu 12.04 LTS Level 2 Benchmark, v1.0.0)
Title: Disable Mounting of jffs2 Filesystems Description: The jffs2 (journaling flash filesystem 2) filesystem type is a log-structured filesystem used in flash memory devices. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If th… (Rule: xccdf_org.cisecurity.benchmarks_rule_2.20_Disable_Mounting_of_jffs2_Filesystems Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_2.20.2_, The Center for Internet Security Ubuntu 12.04 LTS Level 2 Benchmark, v1.0.0)
Support for jffs2 filesystems should be enabeld or disabled as appropriate. Technical Mechanisms: (1) via /etc/modprobe.conf (2) via configuration file in /etc/modprobe.d (3) via MODPROBE_OPTIONS environment variable Parameters: enabled / disabled References: Section: 2.2.2.5 - Disable… (CCE-14853-6, Common Configuration Enumeration List, Combined XML: Red Hat Enterprise Linux 5, 5.20130214)