Red Hat Enterprise Linux 10 Security Technical Implementation Guide

The Red Hat Enterprise Linux 10 Security Technical Implementation Guide (V1 R2) has 434 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

434STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

ArchivedPublished Wed Jul 01 2026

RHEL 10 must disable file system automount function unless required.

Red Hat Enterprise Linux 10 Security Technical Implementation Guide

Assessment Title

Rule Text

RHEL 10 must disable file system automount function unless required.

Description

Discussion Text

An authentication process resists replay attacks if it is impractical to achieve a successful authentication by recording and replaying a previous authentication message.

Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-281323

Rule

SV-281323r1167119_rule

Severity

medium

Rule Version

RHEL-10-701210

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Note: If the "autofs" service is not installed, this requirement is not applicable.

Verify RHEL 10 is configured so that the file system automount function has been disabled with the following command:

$ systemctl is-enabled  autofs
masked

If the returned value is not "masked", "disabled", or "not-found" and is not documented as an operational requirement with the information system security officer, this is a finding.

Implementation Procedure

Fix Text

Configure RHEL 10 to disable the ability to automount devices.

The "autofs" service can be disabled with the following command:

$ sudo systemctl mask --now autofs.service

STIG check 391 of 434 in the Red Hat Enterprise Linux 10 STIG checklist

← Previous · V-281322RHEL 10 must disable the kdump service.Next · V-281324 →RHEL 10 must enable certificate-based smart card authentication.