Skip to content

Commit

Permalink
OCPBUGS-8041: Remove info override for vsyscall kernerl argument
Browse files Browse the repository at this point in the history
This rule actually has the ability to check the kernel arguments, and
generates a remediation if necessary.

Let's remove the overrides, so that it doesn't always so up as `INFO`
and generate a remediation that users can't do anything with.
  • Loading branch information
rhmdnd committed Dec 1, 2023
1 parent 3cc661d commit 475942a
Showing 1 changed file with 0 additions and 2 deletions.
2 changes: 0 additions & 2 deletions controls/nist_rhcos4.yml
Expand Up @@ -5244,8 +5244,6 @@ controls:
- sysctl_net_ipv4_tcp_syncookies
- sysctl_net_ipv4_icmp_ignore_bogus_error_responses
- coreos_vsyscall_kernel_argument
- coreos_vsyscall_kernel_argument.role=unscored
- coreos_vsyscall_kernel_argument.severity=info
- kernel_module_squashfs_disabled
- sysctl_net_ipv4_conf_default_send_redirects
- kernel_module_hfsplus_disabled
Expand Down

0 comments on commit 475942a

Please sign in to comment.