The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Options Explained: disable - would disable the module. disable with error logged - would disable the module and log whenever module is inserted. enable - would enable the module. Rationale: Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is not needed, disable it. Fix: Edit or create the file /etc/modprobe.d/hfs.conf and add the following line: install hfs /bin/true [disable/disable with error logged/enable] Edit or create the file /etc/modprobe.d/hfs.conf and add the following line: install hfs /bin/true oval:org.secpod.oval:def:85156 oval:org.secpod.oval:def:87289 oval:org.secpod.oval:def:92279 oval:org.secpod.oval:def:65934 SCAP Repo OVAL Definition 2023-08-23