SUSE Linux Enterprise Server 15 Security Technical Implementation Guide

The SUSE Linux Enterprise Server 15 Security Technical Implementation Guide (V2 R9) has 220 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

220STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R9

CurrentPublished Wed Sep 30 2026

The SUSE operating system must disable the file system automounter.

SUSE Linux Enterprise Server 15 Security Technical Implementation Guide

Assessment Title

Rule Text

The SUSE operating system must disable the file system automounter.

Description

Discussion Text

Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity.

Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-234823

Rule

SV-234823r1155795_rule

Severity

medium

Rule Version

SLES-15-010240

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the SUSE operating system disables the ability to automount devices.

Check to see if automounter service is active with the following command:

> systemctl status autofs
autofs.service - Automounts filesystems on demand
Loaded: loaded (/usr/lib/systemd/system/autofs.service; disabled)
Active: inactive (dead)

If the "autofs" status is set to "active" this is a finding.

Implementation Procedure

Fix Text

Configure the SUSE operating system to disable the ability to automount devices.

Turn off the automount service with the following commands:

> systemctl stop autofs
> systemctl disable autofs

STIG check 23 of 220 in the SUSE Linux Enterprise Server 15 STIG checklist

← Previous · V-234822The SUSE operating system must not have duplicate User IDs (UIDs) for interactive users.Next · V-234825 →The SUSE operating system must employ FIPS 140-2 approved cryptographic hashing algorithm for system authentication (login.defs).