From 233f75023a57f95dec777c92da64d245dbd28655 Mon Sep 17 00:00:00 2001 From: Thibault Ayanides Date: Mon, 4 Jan 2021 08:15:39 +0100 Subject: [PATCH] FIX(4.1.17): fix typo leading to false positive --- bin/hardening/4.1.17_record_kernel_modules.sh | 2 +- debian/changelog | 6 ++++++ 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/bin/hardening/4.1.17_record_kernel_modules.sh b/bin/hardening/4.1.17_record_kernel_modules.sh index 9123396..c9f7361 100755 --- a/bin/hardening/4.1.17_record_kernel_modules.sh +++ b/bin/hardening/4.1.17_record_kernel_modules.sh @@ -17,7 +17,7 @@ HARDENING_LEVEL=4 # shellcheck disable=2034 DESCRIPTION="Collect kernel module loading and unloading." -AUDIT_PARAMS='-w /sbin/insmod -p x -k modules +AUDIT_PARAMS='-w /sbin/insmod -p x -k modules -w /sbin/rmmod -p x -k modules -w /sbin/modprobe -p x -k modules -a always,exit -F arch=b64 -S init_module -S delete_module -k modules' diff --git a/debian/changelog b/debian/changelog index 94eefea..1a3e3f2 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +cis-hardening (2.1-6) unstable; urgency=medium + + * Fix typo in 4.1.17 that leads to false positive + + -- Thibault Ayanides Mon, 04 Jan 2021 08:11:29 +0100 + cis-hardening (2.1-5) unstable; urgency=medium * Fix various shellcheck warnrings and errors