Fix up section 1.1.1 for RHEL 7 CIS

ComplianceAsCode · Jan 18, 2024 · c9b2ac6 · c9b2ac6
1 parent 3714d37
commit c9b2ac6
Showing 1 changed file with 11 additions and 11 deletions.
diff --git a/controls/cis_rhel7.yml b/controls/cis_rhel7.yml
@@ -28,7 +28,7 @@ controls:
     - dconf_db_up_to_date
 
   - id: 1.1.1.1
-    title: Ensure mounting of cramfs filesystems is disabled (Automated)
+    title: Ensure cramfs kernel module is not available (Automated)
     levels:
     - l1_workstation
     - l1_server
@@ -37,16 +37,16 @@ controls:
     - kernel_module_cramfs_disabled
 
   - id: 1.1.1.2
-    title: Ensure mounting of freevxfs filesystems is disabled (Automated)
+    title: Ensure freevxfs kernel module is not available (Automated)
     levels:
-    - l2_server
-    - l2_workstation
+    - l1_server
+    - l1_workstation
     status: automated
     rules:
     - kernel_module_freevxfs_disabled
 
   - id: 1.1.1.3
-    title: Ensure mounting of hfs filesystems is disabled (Automated)
+    title: Ensure hfs kernel module is not available (Automated)
     levels:
     - l1_server
     - l1_workstation
@@ -55,7 +55,7 @@ controls:
     - kernel_module_hfs_disabled
 
   - id: 1.1.1.4
-    title: Ensure mounting of hfsplus filesystems is disabled (Automated)
+    title: Ensure hfsplus kernel module is not available (Automated)
     levels:
     - l1_server
     - l1_workstation
@@ -64,7 +64,7 @@ controls:
     - kernel_module_hfsplus_disabled
 
   - id: 1.1.1.5
-    title: Ensure mounting of jffs2 filesystems is disabled (Automated)
+    title: Ensure jffs2 kernel module is not available (Automated)
     levels:
     - l1_server
     - l1_workstation
@@ -73,7 +73,7 @@ controls:
     - kernel_module_jffs2_disabled
 
   - id: 1.1.1.6
-    title: Ensure mounting of squashfs filesystems is disabled (Automated)
+    title: Ensure squashfs kernel module is not available (Automated)
     levels:
     - l2_server
     - l2_workstation
@@ -82,10 +82,10 @@ controls:
     - kernel_module_squashfs_disabled
 
   - id: 1.1.1.7
-    title: Ensure mounting of udf filesystems is disabled (Automated)
+    title: Ensure udf kernel module is not available (Automated)
     levels:
-    - l1_server
-    - l1_workstation
+    - l2_server
+    - l2_workstation
     status: automated
     rules:
     - kernel_module_udf_disabled