ComplianceAsCode / ComplianceAsCode/content
Rule mount_option_boot_noauto breaks checking of other mount options in /boot
- Dominant language
- Shell
- Stars
- 2.8k
- Forks
- 828
- Avg merge
- 3d 8m
- Merged PRs (30d)
- 80
Description
#### Description of problem:
When rule `mount_option_boot_noauto` is remediated, `/boot` is not mounted by default.
In this situation, the rules `mount_option_boot_noexec` and `mount_option_boot_nosuid` fail check and remediate properly.
#### SCAP Security Guide Version:
0.1.54
#### Operating System Version:
-
#### Steps to Reproduce:
1.
2.
3.
4.
#### Actual Results:
The checks expect that the partition is mounted and has the options.
#### Expected Results:
When `noauto` option is set, the check should allow the partitions not to be mounted.
The check for mount options should be done via filesystem configuration, probably via `/etc/fstab`.
#### Additional Information/Debugging Steps:
Contributor guide
Assessment
This issue has not been assessed yet.