"name":"Ensure mounting of freevxfs filesystems is disabled (Scored)",
"name":"Ensure mounting of freevxfs filesystems is disabled (Scored)",
"scoring":"scored",
"scoring":"scored",
"cmd":[
"cmd":[
{"input":"modprobe -n -v freevxfs","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"modprobe -n -v freevxfs","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"lsmod | grep freevxfs","output":"","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
{"input":"lsmod | grep freevxfs","output":"","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
],
],
"Remediation":[
"Remediation":[
...
@@ -17,7 +17,7 @@
...
@@ -17,7 +17,7 @@
"name":"Ensure mounting of jffs2 filesystems is disabled (Scored)",
"name":"Ensure mounting of jffs2 filesystems is disabled (Scored)",
"scoring":"Scored",
"scoring":"Scored",
"cmd":[
"cmd":[
{"input":"modprobe -n -v jffs2 | grep -E '(jffs2|install)'","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"modprobe -n -v jffs2 | grep -E '(jffs2|install)'","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"lsmod | grep jffs2","output":"","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}]}
{"input":"lsmod | grep jffs2","output":"","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}]}
],
],
"Remediation":[
"Remediation":[
...
@@ -30,7 +30,7 @@
...
@@ -30,7 +30,7 @@
"name":"Ensure mounting of hfs filesystems is disabled (Scored)",
"name":"Ensure mounting of hfs filesystems is disabled (Scored)",
"scoring":"Scored",
"scoring":"Scored",
"cmd":[
"cmd":[
{"input":"modprobe -n -v hfs","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"modprobe -n -v hfs","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"lsmod | grep hfs","output":"","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
{"input":"lsmod | grep hfs","output":"","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
],
],
"Remediation":[
"Remediation":[
...
@@ -43,7 +43,7 @@
...
@@ -43,7 +43,7 @@
"name":"Ensure mounting of hfsplus filesystems is disabled (Scored)",
"name":"Ensure mounting of hfsplus filesystems is disabled (Scored)",
"scoring":"Scored",
"scoring":"Scored",
"cmd":[
"cmd":[
{"input":"modprobe -n -v hfsplus","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"modprobe -n -v hfsplus","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"lsmod | grep hfsplus","output":"","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
{"input":"lsmod | grep hfsplus","output":"","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
],
],
"Remediation":[
"Remediation":[
...
@@ -55,7 +55,7 @@
...
@@ -55,7 +55,7 @@
"name":"Ensure mounting of squashfs filesystems is disabled (Scored)",
"name":"Ensure mounting of squashfs filesystems is disabled (Scored)",
"scoring":"Scored",
"scoring":"Scored",
"cmd":[
"cmd":[
{"input":"modprobe -n -v squashfs | grep -E '(squashfs|install)'","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"modprobe -n -v squashfs | grep -E '(squashfs|install)'","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"lsmod | grep squashfs","output":"","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
{"input":"lsmod | grep squashfs","output":"","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
],
],
"Remediation":[
"Remediation":[
...
@@ -67,7 +67,7 @@
...
@@ -67,7 +67,7 @@
"name":"Ensure mounting of udf filesystems is disabled (Scored)",
"name":"Ensure mounting of udf filesystems is disabled (Scored)",
"scoring":"Scored",
"scoring":"Scored",
"cmd":[
"cmd":[
{"input":"modprobe -n -v udf | grep -E '(udf|install)'","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"modprobe -n -v udf | grep -E '(udf|install)'","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"lsmod | grep udf","output":"","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
{"input":"lsmod | grep udf","output":"","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
],
],
"Remediation":[
"Remediation":[
...
@@ -79,7 +79,7 @@
...
@@ -79,7 +79,7 @@
"name":"Ensure mounting of FAT filesystems is limited (Not Scored)",
"name":"Ensure mounting of FAT filesystems is limited (Not Scored)",
"scoring":"Not Scored",
"scoring":"Not Scored",
"cmd":[
"cmd":[
{"input":"modprobe -n -v vfat | grep -E '(vfat|install)'","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"modprobe -n -v vfat | grep -E '(vfat|install)'","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"lsmod | grep vfat","output":"","can_have_error":"","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
{"input":"lsmod | grep vfat","output":"","can_have_error":"","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
],
],
"Remediation":[
"Remediation":[
...
@@ -313,7 +313,7 @@
...
@@ -313,7 +313,7 @@
"name":"Disable USB Storage (Scored)",
"name":"Disable USB Storage (Scored)",
"scoring":"Scored",
"scoring":"Scored",
"cmd":[
"cmd":[
{"input":"modprobe -n -v usb-storage","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"modprobe -n -v usb-storage","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"lsmod | grep usb-storage","output":"","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
{"input":"lsmod | grep usb-storage","output":"","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
],
],
"Remediation":[
"Remediation":[
...
@@ -1051,7 +1051,7 @@
...
@@ -1051,7 +1051,7 @@
"name":"Ensure DCCP is disabled (Scored)",
"name":"Ensure DCCP is disabled (Scored)",
"scoring":"Scored",
"scoring":"Scored",
"cmd":[
"cmd":[
{"input":"modprobe -n -v dccp","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"modprobe -n -v dccp","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"lsmod | grep dccp","output":"","can_have_error":"","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
{"input":"lsmod | grep dccp","output":"","can_have_error":"","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
],
],
"Remediation":[
"Remediation":[
...
@@ -1062,7 +1062,7 @@
...
@@ -1062,7 +1062,7 @@
"name":"Ensure SCTP is disabled (Scored)",
"name":"Ensure SCTP is disabled (Scored)",
"scoring":"Scored",
"scoring":"Scored",
"cmd":[
"cmd":[
{"input":"modprobe -n -v sctp | grep -E '(sctp|install)'","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"modprobe -n -v sctp | grep -E '(sctp|install)'","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"lsmod | grep sctp","output":"","can_have_error":"","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
{"input":"lsmod | grep sctp","output":"","can_have_error":"","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
],
],
"Remediation":[
"Remediation":[
...
@@ -1073,7 +1073,7 @@
...
@@ -1073,7 +1073,7 @@
"name":"Ensure RDS is disabled (Scored)",
"name":"Ensure RDS is disabled (Scored)",
"scoring":"Scored",
"scoring":"Scored",
"cmd":[
"cmd":[
{"input":"modprobe -n -v rds","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"modprobe -n -v rds","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"lsmod | grep rds","output":"","can_have_error":"","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
{"input":"lsmod | grep rds","output":"","can_have_error":"","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
],
],
"Remediation":[
"Remediation":[
...
@@ -1084,7 +1084,7 @@
...
@@ -1084,7 +1084,7 @@
"name":"Ensure TIPC is disabled (Scored)",
"name":"Ensure TIPC is disabled (Scored)",
"scoring":"Scored",
"scoring":"Scored",
"cmd":[
"cmd":[
{"input":"modprobe -n -v tipc | grep -E '(tipc|install)'","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"modprobe -n -v tipc | grep -E '(tipc|install)'","output":"install /bin/true\n","can_have_error":"yes","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"},
{"input":"lsmod | grep tipc","output":"","can_have_error":"","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}
{"input":"lsmod | grep tipc","output":"","can_have_error":"","alternative":[{"al_cm":"No Alternative for This Command"},{"al_cm":"No Alternative for This Command"}],"exist_line":"No Alternative for This Command"}