ansible-lockdown / UBUNTU22-CIS-Audit

Audit for Ubuntu 22 CIS
MIT License
38 stars 15 forks source link

Wrong object to test and result in 1.1.24 #5

Closed Iril closed 1 year ago

Iril commented 2 years ago

It seems this test is still looking for cramfs and /bin/true instead of /bin/false

https://github.com/ansible-lockdown/UBUNTU22-CIS-Audit/blob/main/section_1/cis_1.1/cis_1.1.24.yml

Is this correct ?

uk-bolly commented 1 year ago

hi @Iril

Apologies for the delay, i believe this was resolved some time ago and i am looking through the branches to see where this may have occurred. The control itself asks for /bin/true this means when the file is run the install runs it gets a return code of 0 with a bin/false it would fail and error during loading module.

hope this makes sense

kindest regards

uk-bolly