0057-cramfs-disabled-cramfs is Enabled¶

Rule ID¶

• 0057-cramfs-disabled

Category¶

• storage

Level¶

• warn

Compatible Versions¶

• Linux

Description¶

• Monitor the host to ensure that cramfs is not enabled

Scan Frequency¶

• 1 */5 * * *

Rationale¶

• The cramfs file system type is a compressed read-only Linux file system embedded in small systems. A cramfs image can be used without first decompressing the image.

• Removing support for unneeded file system types reduces the local attack surface of the server. If this file system type is not required, disable it

Risk Items¶

• Hacker penetration

• Data breach

Audit Method¶

• Verify that the host ensures whether cramfs is enabled. You can run the following command to verify:

lsmod | grep cramfs

Remediation¶

Impact¶

Default Value¶

• None

References¶

• None

CIS Controls¶

• None