Skip to content

Commit

Permalink
Merge pull request #11544 from rhmdnd/CMP-2372-vsyscall-kernel-arguments
Browse files Browse the repository at this point in the history
CMP-2372: Remove info override for virtual syscall rules
  • Loading branch information
rhmdnd authored Feb 13, 2024
2 parents cab4ffe + cb6cd30 commit a7722d2
Showing 1 changed file with 0 additions and 4 deletions.
4 changes: 0 additions & 4 deletions products/rhcos4/profiles/stig-v1r1.profile
Original file line number Diff line number Diff line change
Expand Up @@ -22,10 +22,6 @@ selections:
- var_selinux_policy_name=targeted
- var_selinux_state=enforcing
- var_accounts_passwords_pam_faillock_dir=run
# Let's mark the vsyscall argument as info - the check and the fix is there, but setting this
# karg is not suitable for people who still run legacy 32bit apps.
- coreos_vsyscall_kernel_argument.role=unscored
- coreos_vsyscall_kernel_argument.severity=info
# Following rules once had a prodtype incompatible with the rhcos4 product
- '!audit_rules_suid_privilege_function'
- '!audit_rules_sudoers'
Expand Down

0 comments on commit a7722d2

Please sign in to comment.