cis-ubuntu1204-v110-2-25

name	cis-ubuntu1204-v110-2-25
description	Disable Automounting
category	cis-os-hardening
version	1.1.0
author	cyberstrike-official
tags	["cis","ubuntu",12.04,"linux","filesystem","autofs","automounting","removable-media"]
cis_id	2.25
cis_benchmark	CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0
tech_stack	["ubuntu","linux"]
cwe_ids	[]
chains_with	[]
prerequisites	[]
severity_boost	{}

2.25 Disable Automounting (Scored)

Profile Applicability

• Level 1

Description

autofs allows automatic mounting of devices, typically including CD/DVDs and USB drives.

Rationale

With automounting enabled anyone with physical access could attach a USB drive or disc and have it's contents available in system even if they lacked permissions to mount it themselves.

Audit Procedure

Using Command Line

Ensure no start conditions listed for autofs:

initctl show-config autofs autofs

Expected Result

No start conditions should be listed for autofs. The service should be disabled or not installed.

Remediation

Using Command Line

Remove or comment out start lines in /etc/init/autofs.conf:

#start on runlevel [2345]

Default Value

By default, autofs may be installed and enabled on Ubuntu 12.04.

References

• CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0

Profile

Level 1 - Scored