STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SLEM 5 must disable the file system automounter.

DISA Rule

SV-261286r1155779_rule

Vulnerability Number

V-261286

Group Title

SRG-OS-000114-GPOS-00059

Rule Version

SLEM-05-231050

Severity

CAT II

CCI(s)

• CCI-000778 - Uniquely identify organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection.

Weight

10

Fix Recommendation

Configure SLEM 5 to disable the ability to automount devices.

Turn off the automount service with the following command:

> sudo systemctl stop autofs

> sudo systemctl disable autofs

Check Contents

Verify SLEM 5 disables the ability to automount devices.

Verify the automounter service is installed with the following command:

> sudo zypper se autofs

If it is installed, verify the automounter service is active with the following command:

> systemctl status autofs
autofs.service - Automounts filesystems on demand
Loaded: loaded (/usr/lib/systemd/system/autofs.service; disabled)
Active: inactive (dead)

If the "autofs" status is set to "active" this is a finding.

Vulnerability Number

V-261286

Documentable

False

Rule Version

SLEM-05-231050

Severity Override Guidance

Verify SLEM 5 disables the ability to automount devices.

Verify the automounter service is installed with the following command:

> sudo zypper se autofs

If it is installed, verify the automounter service is active with the following command:

> systemctl status autofs
autofs.service - Automounts filesystems on demand
Loaded: loaded (/usr/lib/systemd/system/autofs.service; disabled)
Active: inactive (dead)

If the "autofs" status is set to "active" this is a finding.

Check Content Reference

M

Target Key

5596