Skip to content

0059-udf-disabled-udf is Enabled


Rule ID

  • 0059-udf-disabled

Category

  • storage

Level

  • warn

Supported Versions

  • Linux

Description

  • Monitor the host to ensure that UDF is not enabled.

Scan Frequency

  • 1 */5 * * *

Rationale

  • Disabling support for unnecessary filesystem types reduces the local attack surface of the system. If this filesystem type is not required, disable it.

Risk Items

  • Hacker penetration

  • Data leakage

Audit Method

  • Verify whether UDF is enabled on the host. You can run the following command to verify:
lsmod | grep udf

Remediation

  • None

Impact

  • None

Default Value

  • None

References

  • None

CIS Controls

  • None

Feedback

Is this page helpful?