← All control domains
Mounts: 38 controls for Linux hardening
Pavois audits 38 controls in the Mounts hardening domain, across 9 systems and 3 standards (CIS, ANSSI BP-028, NIST 800-53). Every control declares the evidence it gathers, its severity, its remediation and its standard references.
The domain in figures
| Controls | 38 |
| Severities | |
| Evidence gathered | |
| Standards | |
| Systems | Debian 12Debian 13FedoraRHEL 10 / Rocky 10 / AlmaLinux 10RHEL 8 / Rocky 8 / AlmaLinux 8RHEL 9 / Rocky 9 / AlmaLinux 9Ubuntu 22.04Ubuntu 24.04Ubuntu 26.04 |
| Coverage depth | in depth |
What does Pavois check in this domain?
- effective runtime 38
- Checked against the resolved running state (e.g. sshd -T, sysctl, systemctl show), catches drop-ins and Includes a file read would miss. Caveat: runtime ≠ persistence; a value correct now may not survive a reboot.
Which standards does this domain cover?
One effective-configuration check serves as evidence for several standards at once. The references below are the ones the corpus actually carries, never a claimed equivalence. how to read a standard mapping.
- CIS
- 1.1.2.1.1, 1.1.2.1.2, 1.1.2.1.3, 1.1.2.1.4, 1.1.2.2.1, 1.1.2.2.2, 1.1.2.2.3, 1.1.2.2.4, 1.1.2.3.1, 1.1.2.3.2, 1.1.2.3.3, 1.1.2.4.1, 1.1.2.4.2, 1.1.2.4.3, 1.1.2.5.1, 1.1.2.5.2, 1.1.2.5.3, 1.1.2.5.4, 1.1.2.6.1, 1.1.2.6.2, 1.1.2.6.3, 1.1.2.6.4, 1.1.2.7.1, 1.1.2.7.2, 1.1.2.7.3, 1.1.2.7.4
- ANSSI BP-028
- R28, R71
- NIST 800-53
- AC-6, AC-6(1), AU-4, CM-6(a), CM-6(b), CM-7(a), CM-7(b), MP-7, SC-5(2)