Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prevent disabling of filesystems via whitelist #153

Merged
merged 1 commit into from
Dec 23, 2017

Conversation

manuelprinz
Copy link
Contributor

There seems to be no way to prevent disabling specific file systems other than copying and modifying the default list. Entries in the newly create whitelist are removed from the list of file systems to disable.

@rndmh3ro
Copy link
Member

Works, thanks!
Can you add os_filesystem_whitelist: ['vfat'] here, to test it: https://github.com/dev-sec/ansible-os-hardening/blob/master/default.yml#L11

@rndmh3ro rndmh3ro merged commit ac50457 into dev-sec:master Dec 23, 2017
@rndmh3ro
Copy link
Member

Thanks!

@manuelprinz manuelprinz deleted the fs-whitelist branch December 23, 2017 19:14
divialth pushed a commit to divialth/ansible-collection-hardening that referenced this pull request Aug 3, 2022
Prevent disabling of filesystems via whitelist
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants