Detections
Analytics

1.238 ALMA-09-029940

Information

AlmaLinux OS 9 must disable mounting of cramfs.

GROUP ID: V-269344
RULE ID: SV-269344r1050226

Removing support for unneeded filesystem types reduces the local attack surface of the server.

Compressed ROM/RAM file system (or cramfs) is a read-only file system designed for simplicity and space-efficiency. It is mainly used in embedded and small-footprint systems.

Solution

To configure the system to prevent the cramfs kernel module from being loaded, create a *.conf file in /etc/modprobe.d/ with the following content:

install cramfs /bin/false
blacklist cramfs

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CCI|CCI-000381, Rule-ID|SV-269344r1050226_rule, STIG-ID|ALMA-09-029940, Vuln-ID|V-269344

Plugin: Unix

Control ID: 8fcdf0fad36b55e19f098c6c4458d066f09dd6106bd278a074881eed09c39d7e