The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems.
Options Explained:
disable - would disable the module.
disable with error logged - would disable the module and log whenever module is inserted.
enable - would enable the module.
Rationale:
Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is not needed, disable it.
Fix:
Edit or create the file /etc/modprobe.d/hfs.conf and add the following line:
install hfs /bin/true
[disable/disable with error logged/enable]
Edit or create the file /etc/modprobe.d/hfs.conf and add the following line:
install hfs /bin/true
oval:org.secpod.oval:def:85156
oval:org.secpod.oval:def:87289
oval:org.secpod.oval:def:92279
oval:org.secpod.oval:def:65934
SCAP Repo OVAL Definition
2023-08-23