STIGQter: STIG Summary: Oracle Linux 8 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

The OL 8 file system automounter must be disabled.

DISA Rule

SV-248836r1156663_rule

Vulnerability Number

V-248836

Group Title

SRG-OS-000114-GPOS-00059

Rule Version

OL08-00-040070

Severity

CAT II

CCI(s)

• CCI-000778 - Uniquely identify organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection.

Weight

10

Fix Recommendation

Configure OL 8 to disable the ability to automount devices.

Turn off the automount service with the following commands:

$ sudo systemctl stop autofs
$ sudo systemctl disable autofs

Check Contents

Verify OL 8 disables the ability to automount devices.

Determine if the automounter service is active with the following command:

$ sudo systemctl status autofs

autofs.service - Automounts filesystems on demand
Loaded: loaded (/usr/lib/systemd/system/autofs.service; disabled)
Active: inactive (dead)

If the "autofs" status is set to "active" this is a finding.

Vulnerability Number

V-248836

Documentable

False

Rule Version

OL08-00-040070

Severity Override Guidance

Verify OL 8 disables the ability to automount devices.

Determine if the automounter service is active with the following command:

$ sudo systemctl status autofs

autofs.service - Automounts filesystems on demand
Loaded: loaded (/usr/lib/systemd/system/autofs.service; disabled)
Active: inactive (dead)

If the "autofs" status is set to "active" this is a finding.

Check Content Reference

M

Target Key

5416