Skip to content

Commit 6675607

Browse files
committed
Update CIS RHEL10 so it doesn't contain wrong statuses.
1 parent d462d45 commit 6675607

File tree

5 files changed

+18
-1
lines changed

5 files changed

+18
-1
lines changed

controls/cis_rhel10.yml

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -108,6 +108,8 @@ controls:
108108
- l1_server
109109
- l2_workstation
110110
status: automated
111+
rules:
112+
- kernel_module_firewire-core_disabled
111113

112114
- id: 1.1.1.10
113115
title: Ensure usb-storage kernel module is not available (Automated)
@@ -1211,13 +1213,17 @@ controls:
12111213
- l1_server
12121214
- l1_workstation
12131215
status: automated
1216+
rules:
1217+
- kernel_module_atm_disabled
12141218

12151219
- id: 3.2.2
12161220
title: Ensure can kernel module is not available (Automated)
12171221
levels:
12181222
- l1_server
12191223
- l1_workstation
12201224
status: automated
1225+
rules:
1226+
- kernel_module_can_disabled
12211227

12221228
- id: 3.2.3
12231229
title: Ensure dccp kernel module is not available (Automated)
@@ -2945,7 +2951,7 @@ controls:
29452951
levels:
29462952
- l2_server
29472953
- l2_workstation
2948-
status: automated
2954+
status: pending
29492955

29502956
- id: 6.3.3.36
29512957
title: Ensure the audit configuration is immutable (Automated)

tests/data/profile_stability/rhel10/cis.profile

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -237,8 +237,11 @@ has_nonlocal_mta
237237
inactivity_timeout_value=15_minutes
238238
journald_compress
239239
journald_storage
240+
kernel_module_atm_disabled
241+
kernel_module_can_disabled
240242
kernel_module_cramfs_disabled
241243
kernel_module_dccp_disabled
244+
kernel_module_firewire-core_disabled
242245
kernel_module_freevxfs_disabled
243246
kernel_module_hfs_disabled
244247
kernel_module_hfsplus_disabled

tests/data/profile_stability/rhel10/cis_server_l1.profile

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -157,8 +157,11 @@ has_nonlocal_mta
157157
inactivity_timeout_value=15_minutes
158158
journald_compress
159159
journald_storage
160+
kernel_module_atm_disabled
161+
kernel_module_can_disabled
160162
kernel_module_cramfs_disabled
161163
kernel_module_dccp_disabled
164+
kernel_module_firewire-core_disabled
162165
kernel_module_freevxfs_disabled
163166
kernel_module_hfs_disabled
164167
kernel_module_hfsplus_disabled

tests/data/profile_stability/rhel10/cis_workstation_l1.profile

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -155,6 +155,8 @@ has_nonlocal_mta
155155
inactivity_timeout_value=15_minutes
156156
journald_compress
157157
journald_storage
158+
kernel_module_atm_disabled
159+
kernel_module_can_disabled
158160
kernel_module_cramfs_disabled
159161
kernel_module_dccp_disabled
160162
kernel_module_freevxfs_disabled

tests/data/profile_stability/rhel10/cis_workstation_l2.profile

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -237,8 +237,11 @@ has_nonlocal_mta
237237
inactivity_timeout_value=15_minutes
238238
journald_compress
239239
journald_storage
240+
kernel_module_atm_disabled
241+
kernel_module_can_disabled
240242
kernel_module_cramfs_disabled
241243
kernel_module_dccp_disabled
244+
kernel_module_firewire-core_disabled
242245
kernel_module_freevxfs_disabled
243246
kernel_module_hfs_disabled
244247
kernel_module_hfsplus_disabled

0 commit comments

Comments
 (0)