48 lines
1.9 KiB
Diff
48 lines
1.9 KiB
Diff
From 4ac2a6db67e03e616b26d39fb0620d4656bac65b Mon Sep 17 00:00:00 2001
|
|
From: Matthew Burket <mburket@redhat.com>
|
|
Date: Wed, 14 Jul 2021 13:19:42 -0500
|
|
Subject: [PATCH] Add RHEL-08-010590 STIG to existing rule
|
|
|
|
---
|
|
products/rhel8/profiles/stig.profile | 1 +
|
|
tests/data/profile_stability/rhel8/stig.profile | 1 +
|
|
tests/data/profile_stability/rhel8/stig_gui.profile | 1 +
|
|
3 files changed, 3 insertions(+)
|
|
|
|
diff --git a/products/rhel8/profiles/stig.profile b/products/rhel8/profiles/stig.profile
|
|
index 2508008d511..fef1965fb1d 100644
|
|
--- a/products/rhel8/profiles/stig.profile
|
|
+++ b/products/rhel8/profiles/stig.profile
|
|
@@ -341,6 +341,7 @@ selections:
|
|
- mount_option_nodev_nonroot_local_partitions
|
|
|
|
# RHEL-08-010590
|
|
+ - mount_option_home_noexec
|
|
|
|
# RHEL-08-010600
|
|
- mount_option_nodev_removable_partitions
|
|
diff --git a/tests/data/profile_stability/rhel8/stig.profile b/tests/data/profile_stability/rhel8/stig.profile
|
|
index 765487c6f16..843d8eb7d0a 100644
|
|
--- a/tests/data/profile_stability/rhel8/stig.profile
|
|
+++ b/tests/data/profile_stability/rhel8/stig.profile
|
|
@@ -156,6 +156,7 @@ selections:
|
|
- mount_option_dev_shm_nodev
|
|
- mount_option_dev_shm_noexec
|
|
- mount_option_dev_shm_nosuid
|
|
+- mount_option_home_noexec
|
|
- mount_option_home_nosuid
|
|
- mount_option_nodev_nonroot_local_partitions
|
|
- mount_option_nodev_remote_filesystems
|
|
diff --git a/tests/data/profile_stability/rhel8/stig_gui.profile b/tests/data/profile_stability/rhel8/stig_gui.profile
|
|
index 9fd80aac727..6dd0f08b142 100644
|
|
--- a/tests/data/profile_stability/rhel8/stig_gui.profile
|
|
+++ b/tests/data/profile_stability/rhel8/stig_gui.profile
|
|
@@ -167,6 +167,7 @@ selections:
|
|
- mount_option_dev_shm_nodev
|
|
- mount_option_dev_shm_noexec
|
|
- mount_option_dev_shm_nosuid
|
|
+- mount_option_home_noexec
|
|
- mount_option_home_nosuid
|
|
- mount_option_nodev_nonroot_local_partitions
|
|
- mount_option_nodev_remote_filesystems
|