FIX(4.1.17): fix typo leading to false positive

This commit is contained in:
Thibault Ayanides 2021-01-04 08:15:39 +01:00
parent 3560f67e3f
commit 233f75023a
2 changed files with 7 additions and 1 deletions

View File

@ -17,7 +17,7 @@ HARDENING_LEVEL=4
# shellcheck disable=2034 # shellcheck disable=2034
DESCRIPTION="Collect kernel module loading and unloading." DESCRIPTION="Collect kernel module loading and unloading."
AUDIT_PARAMS='-w /sbin/insmod -p x -k modules AUDIT_PARAMS='-w /sbin/insmod -p x -k modules
-w /sbin/rmmod -p x -k modules -w /sbin/rmmod -p x -k modules
-w /sbin/modprobe -p x -k modules -w /sbin/modprobe -p x -k modules
-a always,exit -F arch=b64 -S init_module -S delete_module -k modules' -a always,exit -F arch=b64 -S init_module -S delete_module -k modules'

6
debian/changelog vendored
View File

@ -1,3 +1,9 @@
cis-hardening (2.1-6) unstable; urgency=medium
* Fix typo in 4.1.17 that leads to false positive
-- Thibault Ayanides <thibault.ayanides@ovhcloud.com> Mon, 04 Jan 2021 08:11:29 +0100
cis-hardening (2.1-5) unstable; urgency=medium cis-hardening (2.1-5) unstable; urgency=medium
* Fix various shellcheck warnrings and errors * Fix various shellcheck warnrings and errors