lowkernelverified ✓rollback-safe
Disable squashfs kernel module
kmod-disable-squashfs · RHEL ≥ 8 · 1 impl
Description
The squashfs filesystem is a compressed read-only filesystem. While used by some applications, it should be disabled if not required.
Rationale
Removing support for unnecessary filesystems reduces the kernel attack surface. A vulnerability in an unused filesystem module could be exploited if loadable.
Check → Remediate
Checkkernel_module_state
- name:
- squashfs
- state:
- blacklisted
Remediatekernel_module_disable
- name:
- squashfs
Framework references
CIS
rhel8 1.1.1.7rhel9 1.1.1.6rhel10 1.1.1.7
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#kernel-module#filesystem#attack-surface