lowkernelverified ✓rollback-safe
Disable freevxfs kernel module
kmod-disable-freevxfs · RHEL ≥ 8 · 1 impl
Description
The freevxfs filesystem is a free version of the Veritas filesystem. It is rarely needed on production systems and provides an unnecessary attack surface.
Rationale
Removing support for unnecessary filesystems reduces the kernel attack surface. A vulnerability in an unused filesystem module could be exploited if loadable.
Check → Remediate
Checkkernel_module_state
- name:
- freevxfs
- state:
- blacklisted
Remediatekernel_module_disable
- name:
- freevxfs
Framework references
CIS
rhel8 1.1.1.2rhel9 1.1.1.2rhel10 1.1.1.2
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#kernel-module#filesystem#attack-surface