From eea787e1453b19aa949903c39189479538fbbab9 Mon Sep 17 00:00:00 2001
From: Vojtech Polasek <vpolasek@redhat.com>
Date: Fri, 12 Feb 2021 10:36:10 +0100
Subject: [PATCH] remove mrules disabling vfat file systems from cis profiles

---
 rhcos4/profiles/moderate.profile | 1 -
 rhel7/profiles/cis.profile       | 3 +--
 rhel8/profiles/cis.profile       | 4 ++--
 sle15/profiles/cis.profile       | 1 -
 4 files changed, 3 insertions(+), 6 deletions(-)

diff --git a/rhcos4/profiles/moderate.profile b/rhcos4/profiles/moderate.profile
index 4e715cae9a..966e092c97 100644
--- a/rhcos4/profiles/moderate.profile
+++ b/rhcos4/profiles/moderate.profile
@@ -627,4 +627,3 @@ selections:
     - kernel_module_squashfs_disabled
     - kernel_module_udf_disabled
     - kernel_module_usb-storage_disabled
-    - kernel_module_vfat_disabled
diff --git a/rhel7/profiles/cis.profile b/rhel7/profiles/cis.profile
index 22d5117546..093d2b5759 100644
--- a/rhel7/profiles/cis.profile
+++ b/rhel7/profiles/cis.profile
@@ -46,8 +46,7 @@ selections:
     #### 1.1.1.7 Ensure mounting of udf filesystems is disabled (Scored)
     - kernel_module_udf_disabled
 
-    #### 1.1.1.8 Ensure mounting of FAT filesystems is disabled (Scored)
-    - kernel_module_vfat_disabled
+    #### 1.1.1.8 Ensure mounting of FAT filesystems is disabled (Manual)
 
     ### 1.1.2 Ensure separate partition exists for /tmp (Scored)
     - partition_for_tmp
diff --git a/rhel8/profiles/cis.profile b/rhel8/profiles/cis.profile
index 9ceeb74f9a..e96d2fbb9d 100644
--- a/rhel8/profiles/cis.profile
+++ b/rhel8/profiles/cis.profile
@@ -31,8 +31,8 @@ selections:
     #### 1.1.1.1 Ensure mounting cramfs filesystems is disabled (Scored)
     - kernel_module_cramfs_disabled
 
-    #### 1.1.1.2 Ensure mounting of vFAT flesystems is limited (Not Scored)
-    - kernel_module_vfat_disabled
+    #### 1.1.1.2 Ensure mounting of vFAT filesystems is limited (Not Scored)
+
 
     #### 1.1.1.3 Ensure mounting of squashfs filesystems is disabled (Scored)
     - kernel_module_squashfs_disabled
diff --git a/sle15/profiles/cis.profile b/sle15/profiles/cis.profile
index 9a0efedbdd..fa9ff3b775 100644
--- a/sle15/profiles/cis.profile
+++ b/sle15/profiles/cis.profile
@@ -25,7 +25,6 @@ selections:
     - kernel_module_udf_disabled
 
     #### 1.1.1.4 Ensure mounting of vFAT flesystems is limited (Not Scored)
-    - kernel_module_vfat_disabled
 
     ### 1.1.2 Ensure /tmp is configured (Scored)
     - partition_for_tmp