debian-cis icon indicating copy to clipboard operation
debian-cis copied to clipboard

Disable all file systems not actively used

Open wilsonmar opened this issue 1 year ago • 0 comments

Scripts currently disable known file systems such as https://github.com/ovh/debian-cis/blob/master/bin/hardening/1.1.1.3_disable_hfs.sh

However, a new file system can be introduced which can perform malicious actions.

So for "Zero Trust" Least Privilege principles, I propose that our script disable all file systems found and enable only those in an allowlist.

wilsonmar avatar Aug 09 '24 18:08 wilsonmar