Project

General

Profile

Actions
Copy link

Bug #25535

open

CIS : Checking mount options on non-existing mountpoints

Added by Michel BOUISSOU 2 months ago. Updated 6 days ago.

Status:
New
Priority:
N/A
Assignee:
-
Target version:
Rudder plugins - 8.1
Pull Request:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No

Description

Sections about filesystem partitions asks for some partitions to be separate (i.e. /var/tmp, /var/log) only on level 2, but their respective mount options should be checked also on level 1.

However the benchmark specifies : « - IF - a separate partition exists for ... »

We are checking the mount options on directories that are not separate mountpoints, resulting in an inconsistency in the compliance report.

(See screenshot which is about RHEL 9)

Files

CIS_1.1.2_not_needed_for_profile_240924a.png (136 KB) CIS_1.1.2_not_needed_for_profile_240924a.png Compliance inconsistency. Michel BOUISSOU, 2024-09-24 17:34
Actions
Copy link
 #1

Updated by Lucas FRANCOIS 6 days ago

  • Subject changed from RHEL 9 1.1.2 : Checking mount options on non existing mountpoints to CIS : Checking mount options on non existing mountpoints
  • Description updated (diff)
  • Target version set to 8.1
Actions
Copy link
 #2

Updated by Lucas FRANCOIS 6 days ago

  • Subject changed from CIS : Checking mount options on non existing mountpoints to CIS : Checking mount options on non-existing mountpoints
Actions
Copy link

Also available in: Atom PDF