sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

Merge pull request #398 from trumbaut/fix_rule_3.2.1_reffering_to_cramfs

Browse source 
Update cis_3.2.x.yml (add dccp to blacklist instead of cramfs
This commit is contained in:
uk-bolly 2025-10-02 13:42:40 +01:00 • committed by GitHub
commit c69fedcf0a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
tasks/section_3/cis_3.2.x.yml
View file

@ -25,8 +25,8 @@
- name: "3.2.1 | PATCH | Ensure dccp kernel module is not available | blacklist" - name: "3.2.1 | PATCH | Ensure dccp kernel module is not available | blacklist"
ansible.builtin.lineinfile: ansible.builtin.lineinfile:
path: /etc/modprobe.d/blacklist.conf path: /etc/modprobe.d/blacklist.conf
regexp: "^(#)?blacklist cramfs(\\s|$)" regexp: "^(#)?blacklist dccp(\\s|$)"
line: "blacklist cramfs" line: "blacklist dccp"
create: true create: true
mode: 'u-x,go-rwx' mode: 'u-x,go-rwx'