Re-enable runtime check on network related sysctls

When the CO's "scanner" pod has "HostNetwork" option set to true, these sysctls are visible with values matching Host syctls.
ComplianceAsCode · Jun 28, 2024 · 00023fb · 00023fb
1 parent 9f670b7
commit 00023fb
Show file tree

Hide file tree

Showing 5 changed files with 0 additions and 5 deletions.
diff --git a/.../system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra/rule.yml b/.../system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra/rule.yml
@@ -49,4 +49,3 @@ template:
     vars:
         sysctlvar: net.ipv6.conf.all.accept_ra
         datatype: int
-        check_runtime@rhcos4: "false"
diff --git a/.../network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_redirects/rule.yml b/.../network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_redirects/rule.yml
@@ -51,4 +51,3 @@ template:
     vars:
         sysctlvar: net.ipv6.conf.all.accept_redirects
         datatype: int
-        check_runtime@rhcos4: "false"
diff --git a/...tem/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra/rule.yml b/...tem/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra/rule.yml
@@ -49,4 +49,3 @@ template:
     vars:
         sysctlvar: net.ipv6.conf.default.accept_ra
         datatype: int
-        check_runtime@rhcos4: "false"
diff --git a/...work/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_redirects/rule.yml b/...work/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_redirects/rule.yml
@@ -53,4 +53,3 @@ template:
     vars:
         sysctlvar: net.ipv6.conf.default.accept_redirects
         datatype: int
-        check_runtime@rhcos4: "false"
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_net_core_bpf_jit_harden/rule.yml b/linux_os/guide/system/permissions/restrictions/sysctl_net_core_bpf_jit_harden/rule.yml
@@ -41,4 +41,3 @@ template:
         sysctlvar: net.core.bpf_jit_harden
         sysctlval: '2'
         datatype: int
-        check_runtime@rhcos4: "false"