Re-enable runtime check on network related sysctls

When the CO's "scanner" pod has "HostNetwork" option set to true, these sysctls are visible with values matching Host syctls.
ComplianceAsCode · Mar 15, 2024 · 2e33816 · 2e33816
1 parent b2693b4
commit 2e33816
Show file tree

Hide file tree

Showing 5 changed files with 0 additions and 5 deletions.
diff --git a/.../system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra/rule.yml b/.../system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra/rule.yml
@@ -50,4 +50,3 @@ template:
     vars:
         sysctlvar: net.ipv6.conf.all.accept_ra
         datatype: int
-        check_runtime@rhcos4: "false"
diff --git a/.../network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_redirects/rule.yml b/.../network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_redirects/rule.yml
@@ -52,4 +52,3 @@ template:
     vars:
         sysctlvar: net.ipv6.conf.all.accept_redirects
         datatype: int
-        check_runtime@rhcos4: "false"
diff --git a/...tem/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra/rule.yml b/...tem/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra/rule.yml
@@ -50,4 +50,3 @@ template:
     vars:
         sysctlvar: net.ipv6.conf.default.accept_ra
         datatype: int
-        check_runtime@rhcos4: "false"
diff --git a/...work/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_redirects/rule.yml b/...work/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_redirects/rule.yml
@@ -54,4 +54,3 @@ template:
     vars:
         sysctlvar: net.ipv6.conf.default.accept_redirects
         datatype: int
-        check_runtime@rhcos4: "false"
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_net_core_bpf_jit_harden/rule.yml b/linux_os/guide/system/permissions/restrictions/sysctl_net_core_bpf_jit_harden/rule.yml
@@ -41,4 +41,3 @@ template:
         sysctlvar: net.core.bpf_jit_harden
         sysctlval: '2'
         datatype: int
-        check_runtime@rhcos4: "false"