0058-squashfs-disabled - squashfs Enabled¶

Rule ID¶

• 0058-squashfs-disabled

Category¶

• storage

Severity¶

• warn

Compatible Versions¶

• Linux

Description¶

• Monitor the host to ensure squashfs is not enabled.

Scan Frequency¶

• 1 */5 * * *

Rationale¶

• Disabling support for unnecessary filesystem types reduces the local attack surface of the system. If this filesystem type is not required, disable it.

Risk Items¶

• Hacker intrusion

• Data leakage

Audit Method¶

• Verify whether squashfs is enabled on the host. Run the following command:

lsmod | grep squashfs

Remediation¶

Impact¶

Default Value¶

• None

References¶

• None

CIS Controls¶

• None