STIGQter: STIG Summary: SUSE Linux Enterprise Server 15 Security Technical Implementation Guide Version: 2 Release: 8 Benchmark Date: 01 Jul 2026:

The SUSE operating system must disable the file system automounter.

DISA Rule

SV-234823r1155795_rule

Vulnerability Number

V-234823

Group Title

SRG-OS-000114-GPOS-00059

Rule Version

SLES-15-010240

Severity

CAT II

CCI(s)

• CCI-000778 - Uniquely identify organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection.
• CCI-001958 - Authenticate organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection.

Weight

10

Fix Recommendation

Configure the SUSE operating system to disable the ability to automount devices.

Turn off the automount service with the following commands:

> systemctl stop autofs
> systemctl disable autofs

Check Contents

Verify the SUSE operating system disables the ability to automount devices.

Check to see if automounter service is active with the following command:

> systemctl status autofs
autofs.service - Automounts filesystems on demand
Loaded: loaded (/usr/lib/systemd/system/autofs.service; disabled)
Active: inactive (dead)

If the "autofs" status is set to "active" this is a finding.

Vulnerability Number

V-234823

Documentable

False

Rule Version

SLES-15-010240

Severity Override Guidance

Verify the SUSE operating system disables the ability to automount devices.

Check to see if automounter service is active with the following command:

> systemctl status autofs
autofs.service - Automounts filesystems on demand
Loaded: loaded (/usr/lib/systemd/system/autofs.service; disabled)
Active: inactive (dead)

If the "autofs" status is set to "active" this is a finding.

Check Content Reference

M

Target Key

5274