[PATCH] Consistent Mechanism for Kernel Module Disabling

Mike Palmiotto mpalmiotto at tresys.com
Thu Jan 24 18:59:55 UTC 2013


The community has decided to use a consistent mechanism for disabling kernel
modules.  Currently there is a mixture of `alias [kernel_module] off,`
`install [kernel_module] /bin/true,` and `install [kernel_module] /bin/false.`

This patch makes all instances of kernel module disabling consistently use:
`install [kernel_module] /bin/false.`

Mike Palmiotto (1):
  Change kernel module disabling to use /bin/false.

 RHEL6/input/checks/kernel_module_bluetooth_disabled.xml      | 4 ++--
 RHEL6/input/checks/kernel_module_cramfs_disabled.xml         | 2 +-
 RHEL6/input/checks/kernel_module_dccp_disabled.xml           | 2 +-
 RHEL6/input/checks/kernel_module_freevxfs_disabled.xml       | 2 +-
 RHEL6/input/checks/kernel_module_hfs_disabled.xml            | 2 +-
 RHEL6/input/checks/kernel_module_hfsplus_disabled.xml        | 2 +-
 RHEL6/input/checks/kernel_module_jffs2_disabled.xml          | 2 +-
 RHEL6/input/checks/kernel_module_rds_disabled.xml            | 2 +-
 RHEL6/input/checks/kernel_module_sctp_disabled.xml           | 2 +-
 RHEL6/input/checks/kernel_module_squashfs_disabled.xml       | 2 +-
 RHEL6/input/checks/kernel_module_tipc_disabled.xml           | 2 +-
 RHEL6/input/checks/kernel_module_udf_disabled.xml            | 2 +-
 RHEL6/input/checks/kernel_module_usb-storage_disabled.xml    | 2 +-
 RHEL6/input/checks/templates/template_kernel_module_disabled | 2 +-
 RHEL6/input/system/network/wireless.xml                      | 4 ++--
 15 files changed, 17 insertions(+), 17 deletions(-)

-- 
1.7.11.7



More information about the scap-security-guide mailing list