[PATCH] Consistent Mechanism for Kernel Module Disabling
Mike Palmiotto
mpalmiotto at tresys.com
Thu Jan 24 18:59:55 UTC 2013
The community has decided to use a consistent mechanism for disabling kernel
modules. Currently there is a mixture of `alias [kernel_module] off,`
`install [kernel_module] /bin/true,` and `install [kernel_module] /bin/false.`
This patch makes all instances of kernel module disabling consistently use:
`install [kernel_module] /bin/false.`
Mike Palmiotto (1):
Change kernel module disabling to use /bin/false.
RHEL6/input/checks/kernel_module_bluetooth_disabled.xml | 4 ++--
RHEL6/input/checks/kernel_module_cramfs_disabled.xml | 2 +-
RHEL6/input/checks/kernel_module_dccp_disabled.xml | 2 +-
RHEL6/input/checks/kernel_module_freevxfs_disabled.xml | 2 +-
RHEL6/input/checks/kernel_module_hfs_disabled.xml | 2 +-
RHEL6/input/checks/kernel_module_hfsplus_disabled.xml | 2 +-
RHEL6/input/checks/kernel_module_jffs2_disabled.xml | 2 +-
RHEL6/input/checks/kernel_module_rds_disabled.xml | 2 +-
RHEL6/input/checks/kernel_module_sctp_disabled.xml | 2 +-
RHEL6/input/checks/kernel_module_squashfs_disabled.xml | 2 +-
RHEL6/input/checks/kernel_module_tipc_disabled.xml | 2 +-
RHEL6/input/checks/kernel_module_udf_disabled.xml | 2 +-
RHEL6/input/checks/kernel_module_usb-storage_disabled.xml | 2 +-
RHEL6/input/checks/templates/template_kernel_module_disabled | 2 +-
RHEL6/input/system/network/wireless.xml | 4 ++--
15 files changed, 17 insertions(+), 17 deletions(-)
--
1.7.11.7
More information about the scap-security-guide
mailing list