Puppet Class: cis_security_hardening::rules::freevxfs

Defined in:
manifests/rules/freevxfs.pp

Summary

Ensure mounting of freevxfs filesystems is disabled

Overview

The freevxfs filesystem type is a free version of the Veritas type filesystem. This is the primary filesystem type for HP-UX operating systems.

Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the system. If this filesystem type is not needed, disable it.

Examples:

class { 'cis_security_hardening::rules::freevxfs':
    enforce => true,
}

Parameters:

  • enforce (Boolean) (defaults to: false) —

    Enforce the rule



20
21
22
23
24
25
26
27
28
 
# File 'manifests/rules/freevxfs.pp', line 20

class cis_security_hardening::rules::freevxfs (
  Boolean $enforce = false,
) {
  if $enforce {
    kmod::install { 'freevxfs':
      command => '/bin/true',
    }
  }
}