search

ovh / debian-cis

PCI-DSS compliant Debian 10/11/12 hardening
Other
756 stars 130 forks source link

feat: Filter the filesystem to check when the list is built. #156

Closed ymartin-ovh closed 2 years ago

ymartin-ovh commented 2 years ago

I think we can filter the filesystem set to check when the list is built.

In our case, as we ignore ephemeral volumes (containers), we can avoid false positive as volume may disappear between list creation and actual check.

tdenof commented 2 years ago

Can you please add a test case covering the feature you're adding (if it's complicated then it's fine)

ymartin-ovh commented 2 years ago

I added a missing test on a case 6.1.10. We need to integrate volume with docker to test this properly.