raymond balister
|
[QNX 6.5.0] Security and STIGs - automounting CD-ROMS
|
raymond balister
03/21/2018 10:54 AM
post118688
|
[QNX 6.5.0] Security and STIGs - automounting CD-ROMS
I'm working through applying STIGs to a QNX 6.5.0 system for a customer. One of the requirements is to disable
automounting of filesystems. Disabling USB mass storage is another. I've already been able to disable USB mass storage
through the /etc/system/enum/devices/usb/mass config file. Disabling the auto mounting of CD-ROMs seems to be a little
more elusive.
The last item that I'll have to do is to remove the use of diskboot from the .ifs and use driver calls instead. This is
required due to diskboot giving the spacebar message. Through that path you can boot to the file system (F5) without
entering any credentials. Big security hole.
Are there any suggestions on how to disable automounting of CD-ROMS. I mention the .ifs part since it may be that I'll
fix it by calling the drivers directly anyway.
Raymond Balister
|
|
|