Merge pull request #11722 from yuumasato/rhcos4_sysctl_check_runtime

Re-enable runtime check on network related sysctls
ComplianceAsCode · Jul 12, 2024 · 916bfa4 · 916bfa4
2 parents 56d14eb + 00023fb
commit 916bfa4
Show file tree

Hide file tree

Showing 5 changed files with 0 additions and 5 deletions.
diff --git a/.../system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra/rule.yml b/.../system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_ra/rule.yml
@@ -50,4 +50,3 @@ template:
     vars:
         sysctlvar: net.ipv6.conf.all.accept_ra
         datatype: int
-        check_runtime@rhcos4: "false"
diff --git a/.../network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_redirects/rule.yml b/.../network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_accept_redirects/rule.yml
@@ -52,4 +52,3 @@ template:
     vars:
         sysctlvar: net.ipv6.conf.all.accept_redirects
         datatype: int
-        check_runtime@rhcos4: "false"
diff --git a/...tem/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra/rule.yml b/...tem/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_ra/rule.yml
@@ -50,4 +50,3 @@ template:
     vars:
         sysctlvar: net.ipv6.conf.default.accept_ra
         datatype: int
-        check_runtime@rhcos4: "false"
diff --git a/...work/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_redirects/rule.yml b/...work/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_default_accept_redirects/rule.yml
@@ -54,4 +54,3 @@ template:
     vars:
         sysctlvar: net.ipv6.conf.default.accept_redirects
         datatype: int
-        check_runtime@rhcos4: "false"
diff --git a/linux_os/guide/system/permissions/restrictions/sysctl_net_core_bpf_jit_harden/rule.yml b/linux_os/guide/system/permissions/restrictions/sysctl_net_core_bpf_jit_harden/rule.yml
@@ -42,4 +42,3 @@ template:
         sysctlvar: net.core.bpf_jit_harden
         sysctlval: '2'
         datatype: int
-        check_runtime@rhcos4: "false"