From eea787e1453b19aa949903c39189479538fbbab9 Mon Sep 17 00:00:00 2001 From: Vojtech Polasek Date: Fri, 12 Feb 2021 10:36:10 +0100 Subject: [PATCH] remove mrules disabling vfat file systems from cis profiles --- rhcos4/profiles/moderate.profile | 1 - rhel7/profiles/cis.profile | 3 +-- rhel8/profiles/cis.profile | 4 ++-- sle15/profiles/cis.profile | 1 - 4 files changed, 3 insertions(+), 6 deletions(-) diff --git a/rhcos4/profiles/moderate.profile b/rhcos4/profiles/moderate.profile index 4e715cae9a..966e092c97 100644 --- a/rhcos4/profiles/moderate.profile +++ b/rhcos4/profiles/moderate.profile @@ -627,4 +627,3 @@ selections: - kernel_module_squashfs_disabled - kernel_module_udf_disabled - kernel_module_usb-storage_disabled - - kernel_module_vfat_disabled diff --git a/rhel7/profiles/cis.profile b/rhel7/profiles/cis.profile index 22d5117546..093d2b5759 100644 --- a/rhel7/profiles/cis.profile +++ b/rhel7/profiles/cis.profile @@ -46,8 +46,7 @@ selections: #### 1.1.1.7 Ensure mounting of udf filesystems is disabled (Scored) - kernel_module_udf_disabled - #### 1.1.1.8 Ensure mounting of FAT filesystems is disabled (Scored) - - kernel_module_vfat_disabled + #### 1.1.1.8 Ensure mounting of FAT filesystems is disabled (Manual) ### 1.1.2 Ensure separate partition exists for /tmp (Scored) - partition_for_tmp diff --git a/rhel8/profiles/cis.profile b/rhel8/profiles/cis.profile index 9ceeb74f9a..e96d2fbb9d 100644 --- a/rhel8/profiles/cis.profile +++ b/rhel8/profiles/cis.profile @@ -31,8 +31,8 @@ selections: #### 1.1.1.1 Ensure mounting cramfs filesystems is disabled (Scored) - kernel_module_cramfs_disabled - #### 1.1.1.2 Ensure mounting of vFAT flesystems is limited (Not Scored) - - kernel_module_vfat_disabled + #### 1.1.1.2 Ensure mounting of vFAT filesystems is limited (Not Scored) + #### 1.1.1.3 Ensure mounting of squashfs filesystems is disabled (Scored) - kernel_module_squashfs_disabled diff --git a/sle15/profiles/cis.profile b/sle15/profiles/cis.profile index 9a0efedbdd..fa9ff3b775 100644 --- a/sle15/profiles/cis.profile +++ b/sle15/profiles/cis.profile @@ -25,7 +25,6 @@ selections: - kernel_module_udf_disabled #### 1.1.1.4 Ensure mounting of vFAT flesystems is limited (Not Scored) - - kernel_module_vfat_disabled ### 1.1.2 Ensure /tmp is configured (Scored) - partition_for_tmp