lowkernelverified ✓rollback-safe
Disable hfs kernel module
kmod-disable-hfs · RHEL ≥ 8 · 1 impl
Description
The hfs filesystem is the Apple Hierarchical File System. It is rarely needed on production Linux systems and provides an unnecessary attack surface.
Rationale
Removing support for unnecessary filesystems reduces the kernel attack surface. A vulnerability in an unused filesystem module could be exploited if loadable.
Check → Remediate
Checkkernel_module_state
- name:
- hfs
- state:
- blacklisted
Remediatekernel_module_disable
- name:
- hfs
Framework references
CIS
rhel8 1.1.1.3rhel9 1.1.1.3rhel10 1.1.1.3
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#kernel-module#filesystem#attack-surface