lowkernelverified ✓rollback-safe
Disable jffs2 kernel module
kmod-disable-jffs2 · RHEL ≥ 8 · 1 impl
Description
The jffs2 (Journalling Flash File System 2) kernel module provides support for JFFS2 filesystems used on flash memory devices. It is rarely needed on typical server systems.
Rationale
Removing support for unnecessary filesystems reduces the kernel attack surface. A vulnerability in an unused filesystem module could be exploited if loadable.
Check → Remediate
Checkkernel_module_state
- name:
- jffs2
- state:
- blacklisted
Remediatekernel_module_disable
- name:
- jffs2
Framework references
CIS
rhel9 1.1.1.5rhel10 1.1.1.5rhel8 1.1.1.5
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#kernel-module#filesystem#attack-surface