Cis Ubuntu1204 V110 2 25

Disable Automounting

cyberstrikeus Updated

File contents

2.25 Disable Automounting (Scored)

Profile Applicability

  • Level 1

Description

autofs allows automatic mounting of devices, typically including CD/DVDs and USB drives.

Rationale

With automounting enabled anyone with physical access could attach a USB drive or disc and have it's contents available in system even if they lacked permissions to mount it themselves.

Audit Procedure

Using Command Line

Ensure no start conditions listed for autofs:

initctl show-config autofs autofs

Expected Result

No start conditions should be listed for autofs. The service should be disabled or not installed.

Remediation

Using Command Line

Remove or comment out start lines in /etc/init/autofs.conf:

#start on runlevel [2345]

Default Value

By default, autofs may be installed and enabled on Ubuntu 12.04.

References

  • CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0

Profile

Level 1 - Scored

cyberstrikeus/cyberstrike/tree/main/.cyberstrike/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-12-04-lts-server-benchmark/cis-ubuntu1204-v110-2-25 commit cd1ad24bd1

Frequently asked questions

npx skillmds@latest add cyberstrikeus/cis-ubuntu1204-v110-2-25