Skip to content

Commit a7722d2

Browse files
authored
Merge pull request #11544 from rhmdnd/CMP-2372-vsyscall-kernel-arguments
CMP-2372: Remove info override for virtual syscall rules
2 parents cab4ffe + cb6cd30 commit a7722d2

1 file changed

Lines changed: 0 additions & 4 deletions

File tree

products/rhcos4/profiles/stig-v1r1.profile

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -22,10 +22,6 @@ selections:
2222
- var_selinux_policy_name=targeted
2323
- var_selinux_state=enforcing
2424
- var_accounts_passwords_pam_faillock_dir=run
25-
# Let's mark the vsyscall argument as info - the check and the fix is there, but setting this
26-
# karg is not suitable for people who still run legacy 32bit apps.
27-
- coreos_vsyscall_kernel_argument.role=unscored
28-
- coreos_vsyscall_kernel_argument.severity=info
2925
# Following rules once had a prodtype incompatible with the rhcos4 product
3026
- '!audit_rules_suid_privilege_function'
3127
- '!audit_rules_sudoers'

0 commit comments

Comments
 (0)