← Rules Catalog
mediumservicesverified rollback-safe

Disable autofs service

service-disable-autofs · RHEL ≥ 8 · 1 impl

Description

The autofs service automatically mounts filesystems when accessed. It should be disabled unless automounting is required.

Rationale

Automounting can introduce security risks by automatically mounting potentially malicious filesystems. Explicit mounting provides better control and auditability.

Check → Remediate

Checkservice_state
name:
autofs
active:
false
enabled:
false
Remediateservice_masked
name:
autofs

Framework references

CIS

rhel9 2.1.1rhel8 2.1.1rhel10 2.1.1

STIG

V-257849 / RHEL-09-231040V-230502V-281323 / RHEL-10-701210

NIST 800-53

CM-7

Live verification

rhel10:checkrhel8:checkrhel9:check
#service#autofs#automount#attack-surface#stig