← Back to Nutanix Acropolis GPOS Security Technical Implementation Guide

V-279601

CAT II (Medium)

Nutanix OS must not install autofs.service.

Rule ID

SV-279601r1192483_rule

STIG

Nutanix Acropolis GPOS Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000778

Discussion

Without identifying devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity. Peripherals include, but are not limited to, such devices as flash drives, external storage, and printers.

Check Content

Verify Nutanix OS is configured to not automount devices using the following command.

$ sudo systemctl status autofs

If "autofs.sevice" is installed and or enabled, this is a finding.

Fix Text

Nutanix OS does not support the autofs.service by design. If autofs.service is enabled, some type of corruption has occurred and the OS must be rebuilt.