Detections
Analytics

1.240 ALMA-09-030160

Information

AlmaLinux OS 9 must disable mounting of squashfs.

GROUP ID: V-269346
RULE ID: SV-269346r1050228

Removing support for unneeded filesystem types reduces the local attack surface of the server.

A squashfs compressed filesystem image can be mounted without first decompressing the image.

Note that Snap packages use squashfs.

Solution

To configure the system to prevent the squashfs kernel module from being loaded, create a *.conf file in /etc/modprobe.d/ with the following content:

install squashfs /bin/false
blacklist squashfs

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CCI|CCI-000381, Rule-ID|SV-269346r1050228_rule, STIG-ID|ALMA-09-030160, Vuln-ID|V-269346

Plugin: Unix

Control ID: 58b2198f369cb2ba167baa361be3ef4198a1008d086f539f939b380c856d8c12