ComplianceAsCode / ComplianceAsCode/content

Rule mount_option_boot_noauto breaks checking of other mount options in /boot

Open
#6,571 1 comment 0 reactions 0 assignees View on GitHub
triaged
Dominant language
Shell
Stars
2.8k
Forks
828
Avg merge
3d 8m
Merged PRs (30d)
80

Description

#### Description of problem:
When rule `mount_option_boot_noauto` is remediated, `/boot` is not mounted by default.
In this situation, the rules `mount_option_boot_noexec` and `mount_option_boot_nosuid` fail check and remediate properly.

#### SCAP Security Guide Version:
0.1.54

#### Operating System Version:
-

#### Steps to Reproduce:

1.
2.
3.
4.

#### Actual Results:
The checks expect that the partition is mounted and has the options.

#### Expected Results:
When `noauto` option is set, the check should allow the partitions not to be mounted.
The check for mount options should be done via filesystem configuration, probably via `/etc/fstab`.

#### Additional Information/Debugging Steps:

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.