mediumservicesverified ✓rollback-safe
Disable autofs service
service-disable-autofs · RHEL ≥ 8 · 1 impl
Description
The autofs service automatically mounts filesystems when accessed. It should be disabled unless automounting is required.
Rationale
Automounting can introduce security risks by automatically mounting potentially malicious filesystems. Explicit mounting provides better control and auditability.
Check → Remediate
Checkservice_state
- name:
- autofs
- active:
- false
- enabled:
- false
Remediateservice_masked
- name:
- autofs
Framework references
CIS
rhel9 2.1.1rhel8 2.1.1rhel10 2.1.1
STIG
V-257849 / RHEL-09-231040V-230502V-281323 / RHEL-10-701210
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#service#autofs#automount#attack-surface#stig