Project

General

Profile

Download (11.3 KB)

Bug #19990 » technique.json

Félix DALLIDET, 2021-09-22 11:36

 
{
"bundle_name":"CIS_rhel7_setup_filesystem",
"version":"1.0",
"category":"ncf_techniques",
"description":"Audit rhel7 configuration based on CIS Benchmark.",
"name":"My technique name",
"method_calls":[
{
"condition":"",
"component":"Ensure mounting of cramfs filesystems is disabled",
"reportingLogic":{
"type":"sum"
},
"calls":[
{
"method_name":"command_execution_result",
"class_context":"",
"disableReporting":false,
"component":"Command execution result",
"parameters":[
{
"name":"command",
"value":"lsmod | grep -q cramfs"
},
{
"name":"kept_codes",
"value":"1"
},
{
"name":"repaired_codes",
"value":""
}
],
"id":"7651d366-67de-4ec5-bb62-0c31675534b8"
},
{
"method_name":"command_execution_result",
"class_context":"",
"disableReporting":false,
"component":"Command execution result",
"parameters":[
{
"name":"command",
"value":"modprobe -n -v cramfs | grep -qE 'install (/bin/true|/bin/false)'"
},
{
"name":"kept_codes",
"value":"1"
},
{
"name":"repaired_codes",
"value":""
}
],
"id":"30cc74f8-a6f4-4170-8672-f103c80f32ad"
}
],
"id":"99a6234a-2b44-4f90-b1f8-b13001b954d5"
},
{
"condition":"",
"component":"Ensure mounting of freevxfs filesystems is disabled",
"reportingLogic":{
"type":"sum"
},
"calls":[
{
"method_name":"command_execution_result",
"class_context":"",
"disableReporting":false,
"component":"Command execution result",
"parameters":[
{
"name":"command",
"value":"lsmod | grep -q freevxfs"
},
{
"name":"kept_codes",
"value":"1"
},
{
"name":"repaired_codes",
"value":""
}
],
"id":"fefa2023-0767-4f86-b5b2-d62e55b7a948"
},
{
"method_name":"command_execution_result",
"class_context":"",
"disableReporting":false,
"component":"Command execution result",
"parameters":[
{
"name":"command",
"value":"modprobe -n -v freevxfs | grep -qE 'install (/bin/true|/bin/false)'"
},
{
"name":"kept_codes",
"value":"1"
},
{
"name":"repaired_codes",
"value":""
}
],
"id":"fab3cafd-e63b-4918-b21c-a66ae80abb19"
}
],
"id":"9e0e8426-d3b6-4cfa-a4ad-bd5f17fa3bd9"
},
{
"condition":"",
"component":"Ensure mounting of jffs2 filesystems is disabled",
"reportingLogic":{
"type":"sum"
},
"calls":[
{
"method_name":"command_execution_result",
"class_context":"",
"disableReporting":false,
"component":"Command execution result",
"parameters":[
{
"name":"command",
"value":"lsmod | grep -q jffs2"
},
{
"name":"kept_codes",
"value":"1"
},
{
"name":"repaired_codes",
"value":""
}
],
"id":"fe7455d5-2380-4dcf-a5c6-ddc151577e44"
},
{
"method_name":"command_execution_result",
"class_context":"",
"disableReporting":false,
"component":"Command execution result",
"parameters":[
{
"name":"command",
"value":"modprobe -n -v jffs2 | grep -qE 'install (/bin/true|/bin/false)'"
},
{
"name":"kept_codes",
"value":"1"
},
{
"name":"repaired_codes",
"value":""
}
],
"id":"bdda6f29-bfb0-4790-ab40-05af0b3e0260"
}
],
"id":"8d5cb403-6a81-4ac2-aa60-7798d0d50ebd"
},
{
"condition":"",
"component":"Ensure mounting of hfs filesystems is disabled ",
"reportingLogic":{
"type":"sum"
},
"calls":[
{
"method_name":"command_execution_result",
"class_context":"",
"disableReporting":false,
"component":"Command execution result",
"parameters":[
{
"name":"command",
"value":"lsmod | grep -q hfs"
},
{
"name":"kept_codes",
"value":"1"
},
{
"name":"repaired_codes",
"value":""
}
],
"id":"b17c8891-1bcb-40c4-aed4-03ca4f9714dc"
},
{
"method_name":"command_execution_result",
"class_context":"",
"disableReporting":false,
"component":"Command execution result",
"parameters":[
{
"name":"command",
"value":"modprobe -n -v hfs | grep -qE 'install (/bin/true|/bin/false)'"
},
{
"name":"kept_codes",
"value":"1"
},
{
"name":"repaired_codes",
"value":""
}
],
"id":"ccbd1d99-d702-4f46-a78d-f997e08401a6"
}
],
"id":"10b45e93-67a0-4e9c-bef0-076a5e0d5811"
},
{
"condition":"",
"component":"Ensure mounting of hfsplus filesystems is disabled ",
"reportingLogic":{
"type":"sum"
},
"calls":[
{
"method_name":"command_execution_result",
"class_context":"",
"disableReporting":false,
"component":"Command execution result",
"parameters":[
{
"name":"command",
"value":"lsmod | grep -q hfsplus"
},
{
"name":"kept_codes",
"value":"1"
},
{
"name":"repaired_codes",
"value":""
}
],
"id":"3bd86183-0dee-46fb-939d-891a4d449772"
},
{
"method_name":"command_execution_result",
"class_context":"",
"disableReporting":false,
"component":"Command execution result",
"parameters":[
{
"name":"command",
"value":"modprobe -n -v hfsplus | grep -qE 'install (/bin/true|/bin/false)'"
},
{
"name":"kept_codes",
"value":"1"
},
{
"name":"repaired_codes",
"value":""
}
],
"id":"ae2b6c44-33f9-4727-8caf-dabec66522ce"
}
],
"id":"e722d56b-47d3-4fa1-ac6f-be63fcb21f79"
},
{
"condition":"",
"component":"Ensure mounting of squashfs filesystems is disabled",
"reportingLogic":{
"type":"sum"
},
"calls":[
{
"method_name":"command_execution_result",
"class_context":"",
"disableReporting":false,
"component":"Command execution result",
"parameters":[
{
"name":"command",
"value":"lsmod | grep -q squashfs"
},
{
"name":"kept_codes",
"value":"1"
},
{
"name":"repaired_codes",
"value":""
}
],
"id":"93862ed5-58a8-40f5-87ab-701ed76b5f46"
},
{
"method_name":"command_execution_result",
"class_context":"",
"disableReporting":false,
"component":"Command execution result",
"parameters":[
{
"name":"command",
"value":"modprobe -n -v squashfs | grep -qE 'install (/bin/true|/bin/false)'"
},
{
"name":"kept_codes",
"value":"1"
},
{
"name":"repaired_codes",
"value":""
}
],
"id":"47838099-1f99-4873-89f2-a0209adaa1ce"
}
],
"id":"06c27a01-44fb-4c91-adc3-c41bf65ce9ec"
},
{
"condition":"",
"component":"Ensure mounting of udf filesystems is disabled",
"reportingLogic":{
"type":"sum"
},
"calls":[
{
"method_name":"command_execution_result",
"class_context":"",
"disableReporting":false,
"component":"Command execution result",
"parameters":[
{
"name":"command",
"value":"lsmod | grep -q udf"
},
{
"name":"kept_codes",
"value":"1"
},
{
"name":"repaired_codes",
"value":""
}
],
"id":"1a734536-d8bd-401e-9f59-7427e386f266"
},
{
"method_name":"command_execution_result",
"class_context":"",
"disableReporting":false,
"component":"Command execution result",
"parameters":[
{
"name":"command",
"value":"modprobe -n -v udf | grep -qE 'install (/bin/true|/bin/false)'"
},
{
"name":"kept_codes",
"value":"1"
},
{
"name":"repaired_codes",
"value":""
}
],
"id":"505396f2-273d-4265-921c-a155bc92e61a"
}
],
"id":"377180af-1c36-4cf9-bee8-78558a846c3f"
},
{
"condition":"",
"component":"Ensure mounting of FAT filesystems is disabled",
"reportingLogic":{
"type":"sum"
},
"calls":[
{
"method_name":"command_execution_result",
"class_context":"",
"disableReporting":false,
"component":"Command execution result",
"parameters":[
{
"name":"command",
"value":"lsmod | grep -q vfat"
},
{
"name":"kept_codes",
"value":"1"
},
{
"name":"repaired_codes",
"value":""
}
],
"id":"15eb42e8-73eb-406a-8f0a-d29062fe54ca"
},
{
"method_name":"command_execution_result",
"class_context":"",
"disableReporting":false,
"component":"Command execution result",
"parameters":[
{
"name":"command",
"value":"modprobe -n -v vfat | grep -qE 'install (/bin/true|/bin/false)'"
},
{
"name":"kept_codes",
"value":"1"
},
{
"name":"repaired_codes",
"value":""
}
],
"id":"5f82115d-9558-48b3-86c4-5d86bc340589"
}
],
"id":"54cd9d28-4502-41f7-9eaa-4aebf846029d"
}
],
"parameter":[],
"resources":[]
}
    (1-1/1)