Check: GEN008440
VMware ESX 3 Server:
GEN008440
(in version v1 r2)
Title
Automated file system mounting tools must not be enabled unless needed. (Cat III impact)
Discussion
Automated file system mounting tools may provide unprivileged users with the ability to access local media and network shares. If this access is not necessary for the system’s operation, it must be disabled to reduce the risk of unauthorized access to these resources.
Check Content
Determine if the system uses automated file system mounting tools (such as autofs or automount). If it does, this is a finding.
Fix Text
Disable the automated file system mounting tools.
Additional Identifiers
Rule ID: SV-26252r1_rule
Vulnerability ID: V-22577
Group Title: GEN008440
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000366 |
The organization implements the security configuration settings. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| CM-6 |
Configuration Settings |