Title

Automated file system mounting tools must not be enabled unless needed. (Cat III impact)

Discussion

Automated file system mounting tools may provide unprivileged users with the ability to access local media and network shares. If this access is not necessary for the system’s operation, it must be disabled to reduce the risk of unauthorized access to these resources.

Check Content

Check if the autofs service is running. # rcautofs status OR # service autofs status If the service is running, this is a finding.

Fix Text

Stop and disable the autofs service. # rcautofs stop OR # service autofs stop # insserv –r autofs OR # chkconfig autofs off

Additional Identifiers

Rule ID: SV-46045r1_rule

Vulnerability ID: V-22577

Group Title: GEN008440

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.