Skip to content

Commit

Permalink
Merge pull request #71 from bitvijays/cis_disable_unused_filesystem
Browse files Browse the repository at this point in the history
1.1.1 CIS Disable unused filesystem
  • Loading branch information
atomic111 authored Jul 7, 2017
2 parents bf4b107 + 98bf7b9 commit 38573dd
Showing 1 changed file with 16 additions and 0 deletions.
16 changes: 16 additions & 0 deletions controls/os_spec.rb
Original file line number Diff line number Diff line change
Expand Up @@ -224,3 +224,19 @@
it { should be_empty }
end
end

control 'os-10' do
impact 1.0
title 'CIS: Disable unused filesystems'
desc '1.1.1 Ensure mounting of cramfs, freevxfs, jffs2, hfs, hfsplus, squashfs, udf, FAT'
describe file('/etc/modprobe.d/dev-sec.conf') do
its(:content) { should match 'install cramfs /bin/true' }
its(:content) { should match 'install freevxfs /bin/true' }
its(:content) { should match 'install jffs2 /bin/true' }
its(:content) { should match 'install hfs /bin/true' }
its(:content) { should match 'install hfsplus /bin/true' }
its(:content) { should match 'install squashfs /bin/true' }
its(:content) { should match 'install udf /bin/true' }
its(:content) { should match 'install vfat /bin/true' }
end
end

0 comments on commit 38573dd

Please sign in to comment.