# CIS Ubuntu 14.04 LTS - 1.1.21 Disable Automounting

> Disable autofs to prevent automatic mounting of removable media devices

- Skill: `cyberstrikeus/cis-ubuntu-14-04-lts-1-1-21-disable-automounting` (Agent Skill)
- Install (CLI): `npx skillmds@latest add cyberstrikeus/cis-ubuntu-14-04-lts-1-1-21-disable-automounting`
- Raw SKILL.md: https://api.skillmd.com/api/skills/cyberstrikeus/cis-ubuntu-14-04-lts-1-1-21-disable-automounting/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: cyberstrikeus (https://skillmd.com/u/cyberstrikeus)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/cyberstrikeus/cis-ubuntu-14-04-lts-1-1-21-disable-automounting

---


# 1.1.21 Disable Automounting (Scored)

## Profile Applicability

- Level 1 - Server
- Level 2 - Workstation

## Description

autofs allows automatic mounting of devices, typically including CD/DVDs and USB drives.

## Rationale

With automounting enabled anyone with physical access could attach a USB drive or disc and have its contents available in system even if they lacked permissions to mount it themselves.

## Audit Procedure

```bash
# Run the following commands to verify no start conditions listed for autofs:
initctl show-config autofs
# Expected output: autofs
```

## Expected Result

The output should show autofs with no start conditions listed (no `start on` directives).

## Remediation

```bash
# Remove or comment out start lines in /etc/init/autofs.conf:
#start on runlevel [2345]
```

## Default Value

By default, autofs may be enabled.

## Impact

The use of portable hard drives is very common for workstation users. If your organization allows the use of portable storage or media on workstations and physical access controls to workstations is considered adequate there is little value add in turning off automounting.

## Notes

This control should align with the tolerance of the use of portable drives and optical media in the organization. On a server requiring an admin to manually mount media can be part of defense-in-depth to reduce the risk of unapproved software or information being introduced or proprietary software or information being exfiltrated.

## References

- CIS Ubuntu Linux 14.04 LTS Benchmark v2.1.0

## Profile

- Level 1