Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide

The Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide (V1 R2) has 391 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

391STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Wed Sep 30 2026

TOSS 5 file system automount function must be disabled unless required.

Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide

Assessment Title

Rule Text

TOSS 5 file system automount function must be disabled unless required.

Description

Discussion Text

An authentication process resists replay attacks if it is impractical to achieve a successful authentication by recording and replaying a previous authentication message.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-282497

Rule

SV-282497r1200471_rule

Severity

medium

Rule Version

TOSS-05-000133

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify TOSS 5 file system automount function has been disabled using the following command:

$ sudo systemctl is-enabled  autofs

masked

If the returned value is not "masked", "disabled", "Failed to get unit file state for autofs.service for autofs", or "enabled", and is not documented as operational requirement with the information system security officer (ISSO), this is a finding.

Implementation Procedure

Fix Text

Configure TOSS 5 to disable the ability to automount devices.

Disable the "autofs" service using the following command:

$ sudo systemctl mask --now autofs.service

STIG check 142 of 391 in the Tri-Lab Operating System Stack (TOSS) 5 STIG checklist

← Previous · V-282494TOSS 5 must not permit direct logins to the root account using remote access via SSH.Next · V-282498 →TOSS 5 must disable the graphical user interface automount function unless required.