1.1.1 - Unused Filesystems, add blacklist to CIS.conf - RHEL8

dsglaser / cis-security

Playbooks to implement Center for Internet Security (CIS) controls for RHEL (7-9), RHEL Clones, Ubuntu (18.04-22.04), and Microsoft Windows (10, Server 2019)

Other

90 stars 63 forks source link

1.1.1 - Unused Filesystems, add blacklist to CIS.conf - RHEL8 #73

Closed osullivanm-csi closed 1 year ago

osullivanm-csi commented 1 year ago

Hi,

In addition to:

install "unused_filesystems" /bin/false

can

blacklist "unused_filesystems"

be added as well?

Example:

install squashfs /bin/false blacklist squashfs

The reason is a a CIS CAT scan fails because it is missing.

Thanks.

dsglaser commented 1 year ago

didn't notice they added the blacklist in v2.0.0. I've added them and pushed to master.