-
Notifications
You must be signed in to change notification settings - Fork 685
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update sebool_secure_mode_insmod OL remediations #9979
Update sebool_secure_mode_insmod OL remediations #9979
Conversation
Hi @Xeicker. Thanks for your PR. I'm waiting for a ComplianceAsCode member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
@freddieRv Can you please take a look on this? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Changes LGTM
linux_os/guide/system/selinux/selinux-booleans/sebool_secure_mode_insmod/ansible/shared.yml
Outdated
Show resolved
Hide resolved
8441c91
to
e5d03f3
Compare
linux_os/guide/system/selinux/selinux-booleans/sebool_secure_mode_insmod/ansible/shared.yml
Outdated
Show resolved
Hide resolved
linux_os/guide/system/selinux/selinux-booleans/sebool_secure_mode_insmod/ansible/shared.yml
Outdated
Show resolved
Hide resolved
linux_os/guide/system/selinux/selinux-booleans/sebool_secure_mode_insmod/ansible/shared.yml
Outdated
Show resolved
Hide resolved
After setting secure_mode_insmod to true, Oracle Linux wasn't able to boot. Preload vfat in initramfs so that the system has no issues booting Signed-off-by: Edgar Aguilar <edgar.aguilar@oracle.com>
Co-authored-by: Marcus Burghardt <2074099+marcusburghardt@users.noreply.github.com>
18dbe3d
to
5176fad
Compare
linux_os/guide/system/selinux/selinux-booleans/sebool_secure_mode_insmod/bash/shared.sh
Outdated
Show resolved
Hide resolved
For ansible and bash only applicable to ol products Signed-off-by: Edgar Aguilar <edgar.aguilar@oracle.com>
Code Climate has analyzed commit 60c8b08 and detected 0 issues on this pull request. The test coverage on the diff in this pull request is 100.0% (50% is the threshold). This pull request will bring the total coverage in the repository to 51.7% (2.2% change). View more on Code Climate. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks
Automatus CS9, CS9 and Fedora are failing because there is no SELinux commands in the containers used for these tests. |
Description:
Rationale:
secure_mode_insmod
to true, Oracle Linux wasn't able to boot. Preload vfat in initramfs so that the system has no issues bootingReview Hints:
secure_mode_insmod
to true and reboot. This probably occurs also in RHEL systems