Blame SOURCES/scap-security-guide-0.1.55-drop_kernel_module_vfat_disabled-PR_6613.patch

618a7c
From eea787e1453b19aa949903c39189479538fbbab9 Mon Sep 17 00:00:00 2001
618a7c
From: Vojtech Polasek <vpolasek@redhat.com>
618a7c
Date: Fri, 12 Feb 2021 10:36:10 +0100
618a7c
Subject: [PATCH] remove mrules disabling vfat file systems from cis profiles
618a7c
618a7c
---
618a7c
 rhcos4/profiles/moderate.profile | 1 -
618a7c
 rhel7/profiles/cis.profile       | 3 +--
618a7c
 rhel8/profiles/cis.profile       | 4 ++--
618a7c
 sle15/profiles/cis.profile       | 1 -
618a7c
 4 files changed, 3 insertions(+), 6 deletions(-)
618a7c
618a7c
diff --git a/rhcos4/profiles/moderate.profile b/rhcos4/profiles/moderate.profile
618a7c
index 4e715cae9a..966e092c97 100644
618a7c
--- a/rhcos4/profiles/moderate.profile
618a7c
+++ b/rhcos4/profiles/moderate.profile
618a7c
@@ -627,4 +627,3 @@ selections:
618a7c
     - kernel_module_squashfs_disabled
618a7c
     - kernel_module_udf_disabled
618a7c
     - kernel_module_usb-storage_disabled
618a7c
-    - kernel_module_vfat_disabled
618a7c
diff --git a/rhel7/profiles/cis.profile b/rhel7/profiles/cis.profile
618a7c
index 22d5117546..093d2b5759 100644
618a7c
--- a/rhel7/profiles/cis.profile
618a7c
+++ b/rhel7/profiles/cis.profile
618a7c
@@ -46,8 +46,7 @@ selections:
618a7c
     #### 1.1.1.7 Ensure mounting of udf filesystems is disabled (Scored)
618a7c
     - kernel_module_udf_disabled
618a7c
 
618a7c
-    #### 1.1.1.8 Ensure mounting of FAT filesystems is disabled (Scored)
618a7c
-    - kernel_module_vfat_disabled
618a7c
+    #### 1.1.1.8 Ensure mounting of FAT filesystems is disabled (Manual)
618a7c
 
618a7c
     ### 1.1.2 Ensure separate partition exists for /tmp (Scored)
618a7c
     - partition_for_tmp
618a7c
diff --git a/rhel8/profiles/cis.profile b/rhel8/profiles/cis.profile
618a7c
index 9ceeb74f9a..e96d2fbb9d 100644
618a7c
--- a/rhel8/profiles/cis.profile
618a7c
+++ b/rhel8/profiles/cis.profile
618a7c
@@ -31,8 +31,8 @@ selections:
618a7c
     #### 1.1.1.1 Ensure mounting cramfs filesystems is disabled (Scored)
618a7c
     - kernel_module_cramfs_disabled
618a7c
 
618a7c
-    #### 1.1.1.2 Ensure mounting of vFAT flesystems is limited (Not Scored)
618a7c
-    - kernel_module_vfat_disabled
618a7c
+    #### 1.1.1.2 Ensure mounting of vFAT filesystems is limited (Not Scored)
618a7c
+
618a7c
 
618a7c
     #### 1.1.1.3 Ensure mounting of squashfs filesystems is disabled (Scored)
618a7c
     - kernel_module_squashfs_disabled
618a7c
diff --git a/sle15/profiles/cis.profile b/sle15/profiles/cis.profile
618a7c
index 9a0efedbdd..fa9ff3b775 100644
618a7c
--- a/sle15/profiles/cis.profile
618a7c
+++ b/sle15/profiles/cis.profile
618a7c
@@ -25,7 +25,6 @@ selections:
618a7c
     - kernel_module_udf_disabled
618a7c
 
618a7c
     #### 1.1.1.4 Ensure mounting of vFAT flesystems is limited (Not Scored)
618a7c
-    - kernel_module_vfat_disabled
618a7c
 
618a7c
     ### 1.1.2 Ensure /tmp is configured (Scored)
618a7c
     - partition_for_tmp