Update cis_3.2.x.yml (add dccp to blacklist instead of cramfs

Signed-off-by: Thomas Rumbaut <thomas@rumbaut.be>
This commit is contained in:
Thomas Rumbaut 2025-10-02 10:06:44 +02:00 committed by GitHub
parent d91d0d949e
commit 7aa911b354
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -25,8 +25,8 @@
- name: "3.2.1 | PATCH | Ensure dccp kernel module is not available | blacklist" - name: "3.2.1 | PATCH | Ensure dccp kernel module is not available | blacklist"
ansible.builtin.lineinfile: ansible.builtin.lineinfile:
path: /etc/modprobe.d/blacklist.conf path: /etc/modprobe.d/blacklist.conf
regexp: "^(#)?blacklist cramfs(\\s|$)" regexp: "^(#)?blacklist dccp(\\s|$)"
line: "blacklist cramfs" line: "blacklist dccp"
create: true create: true
mode: 'u-x,go-rwx' mode: 'u-x,go-rwx'