The community has decided to use a consistent mechanism for disabling kernel modules. Currently there is a mixture of `alias [kernel_module] off,` `install [kernel_module] /bin/true,` and `install [kernel_module] /bin/false.`
This patch makes all instances of kernel module disabling consistently use: `install [kernel_module] /bin/false.` Mike Palmiotto (1): Change kernel module disabling to use /bin/false. RHEL6/input/checks/kernel_module_bluetooth_disabled.xml | 4 ++-- RHEL6/input/checks/kernel_module_cramfs_disabled.xml | 2 +- RHEL6/input/checks/kernel_module_dccp_disabled.xml | 2 +- RHEL6/input/checks/kernel_module_freevxfs_disabled.xml | 2 +- RHEL6/input/checks/kernel_module_hfs_disabled.xml | 2 +- RHEL6/input/checks/kernel_module_hfsplus_disabled.xml | 2 +- RHEL6/input/checks/kernel_module_jffs2_disabled.xml | 2 +- RHEL6/input/checks/kernel_module_rds_disabled.xml | 2 +- RHEL6/input/checks/kernel_module_sctp_disabled.xml | 2 +- RHEL6/input/checks/kernel_module_squashfs_disabled.xml | 2 +- RHEL6/input/checks/kernel_module_tipc_disabled.xml | 2 +- RHEL6/input/checks/kernel_module_udf_disabled.xml | 2 +- RHEL6/input/checks/kernel_module_usb-storage_disabled.xml | 2 +- RHEL6/input/checks/templates/template_kernel_module_disabled | 2 +- RHEL6/input/system/network/wireless.xml | 4 ++-- 15 files changed, 17 insertions(+), 17 deletions(-) -- 1.7.11.7 _______________________________________________ scap-security-guide mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
