debian-cis
debian-cis copied to clipboard
Disable all file systems not actively used
Scripts currently disable known file systems such as https://github.com/ovh/debian-cis/blob/master/bin/hardening/1.1.1.3_disable_hfs.sh
However, a new file system can be introduced which can perform malicious actions.
So for "Zero Trust" Least Privilege principles, I propose that our script disable all file systems found and enable only those in an allowlist.