From bfe2bf78f690f3c40cf4742e39834e22a9fb781b Mon Sep 17 00:00:00 2001 From: Mark Bolwell Date: Mon, 16 Jan 2023 16:48:49 +0000 Subject: [PATCH] updated blacklist test Signed-off-by: Mark Bolwell --- section_1/cis_1.1/cis_1.1.1.1_3.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/section_1/cis_1.1/cis_1.1.1.1_3.yml b/section_1/cis_1.1/cis_1.1.1.1_3.yml index 406fe36..4cb7439 100644 --- a/section_1/cis_1.1/cis_1.1.1.1_3.yml +++ b/section_1/cis_1.1/cis_1.1.1.1_3.yml @@ -18,7 +18,7 @@ command: grep_cramfs_blacklist: title: 1.1.1.1 | Ensure mounting of cramfs filesystems is disabled | blacklist exit-status: 0 - exec: "grep blacklist cramfs /etc/modprobe.d/blacklist.conf" + exec: "grep 'blacklist cramfs' /etc/modprobe.d/blacklist.conf" stdout: - '/^blacklist cramfs/' meta: @@ -51,7 +51,7 @@ command: grep_squashfs_blacklist: title: 1.1.1.2 | Ensure mounting of squashfs filesystems is disabled | blacklist exit-status: 0 - exec: "grep blacklist squashfs /etc/modprobe.d/blacklist.conf" + exec: "grep 'blacklist squashfs' /etc/modprobe.d/blacklist.conf" stdout: - '/^blacklist squashfs/' meta: @@ -81,9 +81,9 @@ command: CISv8_IG2: true CISv8_IG3: true grep_udf_blacklist: - title: 1.1.1.1 | Ensure mounting of udf filesystems is disabled | blacklist + title: 1.1.1.3 | Ensure mounting of udf filesystems is disabled | blacklist exit-status: 0 - exec: "grep blacklist udf /etc/modprobe.d/blacklist.conf" + exec: "grep 'blacklist' udf /etc/modprobe.d/blacklist.conf" stdout: - '/^blacklist udf/' meta: