0060-fat-disabled-vfat Enabled¶

Rule ID¶

• 0060-fat-disabled

Category¶

• storage

Level¶

• warn

Compatible Versions¶

• Linux

Description¶

• Monitor the host to ensure that fat / vfat / msdos are not enabled.

Scan Frequency¶

• 1 */5 * * *

Rationale¶

• Disabling support for unnecessary file system types reduces the local attack surface of the system. If this file system type is not required, disable it.

Risk Items¶

• Hacker intrusion

• Data leakage

Audit Method¶

• Verify whether fat / vfat / msdos are enabled on the host. Execute the following command:

lsmod | grep -E "msdos|vfat|fat"

Remediation¶

Impact¶

Default Value¶

• None

References¶

• None

CIS Controls¶

• None