Detections
Analytics

2.2.1 Ensure autofs services are not in use

Information

The autofs service allows automatic mounting of devices, which typically includes CD/DVDs and USB drives.

With automounting enabled anyone with physical access could attach a USB drive or disc and have its contents available in system even if they lacked permissions to mount it themselves.

Solution

Run the following commands to stop automount and disable automount service:

# service automount onestop
# service automount onedisable

Impact:

The use of portable hard drives is very common for workstation users. If your organization allows the use of portable storage or media on workstations and physical access controls to workstations is considered adequate there is little value add in turning off automounting.

autofs is part of the base system and is disabled by default.

See Also

https://workbench.cisecurity.org/benchmarks/19044

Item Details

Category: MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|MP-7, 800-53|SI-3, CSCv7|8.5

Plugin: Unix

Control ID: acaa5c1aae5ae78660339c4d8585d56e2a73ab864fd02392da5c852514bd705a