Title

All local file systems must employ journaling or another mechanism ensuring file system consistency. (Cat III impact)

Discussion

File system journaling, or logging, can allow reconstruction of file system data after a system crash, thus preserving the integrity of data that may have otherwise been lost. Journaling file systems typically do not require consistency checks upon booting after a crash, which can improve system availability. Some file systems employ other mechanisms to ensure consistency which also satisfy this requirement.

Check Content

Parse the /etc/fstab file for any mountable HFS file system entries: # cat /etc/fstab | grep -v "^#" | grep -v "/stand" | grep hfs If any /etc/fstab entries are displayed, this is a finding.

Fix Text

Convert any local HFS filesystems to use journaling, ensuring file system consistency.

Additional Identifiers

Rule ID: SV-26639r1_rule

Vulnerability ID: V-22422

Group Title: GEN003650

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.