Ensure jffs2 kernel module is not available

檢查方式

稽核方法: Shell 指令

m=jffs2; found=$(find /lib/modules/$(uname -r)/kernel /usr/lib/modules/$(uname -r)/kernel -path "*/jffs2*" 2>/dev/null | head -n1); if [ -z "$found" ]; then echo compliant; exit 0; fi; lsmod | awk '{print $1}' | grep -Fxq -- "${m//-/_}" && { echo "$m is loaded"; exit 0; }; cfg=$(modprobe --showconfig 2>/dev/null); printf '%s\n' "$cfg" | grep -Pq -- "^\h*blacklist\h+${m//-/_}\b" || { echo "$m is not blacklisted"; exit 0; }; printf '%s\n' "$cfg" | grep -Pq -- "^\h*install\h+${m//-/_}\h+(/usr)?/bin/(true|false)\b" || { echo "$m install is not disabled"; exit 0; }; echo compliant

預期輸出

compliant

修補方式

修補方法: 操作指南或基礎設施修補檔

Unload and disable the jffs2 kernel module. 1. Run the following commands to unload the jffs2 kernel module: # modprobe -r jffs2 2>/dev/null # rmmod jffs2 2>/dev/null 2. Perform the following to disable the jffs2 kernel module: Create a file ending in .conf with install jffs2 /bin/false in the /etc/modprobe.d/ directory. Example: # printf '%s\n' "" "install jffs2 /bin/false" >> /etc/modprobe.d/60- jffs2.conf Create a file ending in .conf with blacklist jffs2 in the /etc/modprobe.d/ directory. Example: # printf '%s\n' "" "blacklist jffs2" >> /etc/modprobe.d/60-jffs2.conf

檢查此主機

請在您有權稽核的機器上執行此指令。掃描為唯讀操作。

tmaegis scan --target linux