updated mounts

Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell
2022-05-16 17:02:16 +01:00
parent 4a015358ca
commit fefe0f9306
8 changed files with 8 additions and 8 deletions
+1 -1
View File
@@ -1,7 +1,7 @@
{{ if .Vars.rhel9cis_level_1 }}
{{ if .Vars.rhel9cis_rule_1_1_3_1 }}
mount:
/tmp:
/var:
title: |
1.1.3.3 | Ensure noexec option set on /var partition
1.1.3.4 | Ensure nosuid option set on /var partition
+1 -1
View File
@@ -1,7 +1,7 @@
{{ if .Vars.rhel9cis_level_1 }}
{{ if .Vars.rhel9cis_rule_1_1_4_1 }}
mount:
/var:
/var/tmp:
title: |
1.1.4.1 | Ensure separate partition exists for /var/tmp
1.1.4.2 | Ensure nodev option set on /var/tmp partition
+1 -1
View File
@@ -1,7 +1,7 @@
{{ if .Vars.rhel9cis_level_1 }}
{{ if .Vars.rhel9cis_rule_1_1_4_1 }}
mount:
/tmp:
/var/tmp:
title: |
1.1.4.3 | Ensure noexec option set on /var/tmp partition
1.1.4.4 | Ensure nosuid option set on /var/tmp partition
+1 -1
View File
@@ -1,7 +1,7 @@
{{ if .Vars.rhel9cis_level_1 }}
{{ if .Vars.rhel9cis_rule_1_1_5_1 }}
mount:
/var:
/var/log:
title: 1.1.5.1 | Ensure separate partition exists for /var/log
exists: true
opts:
+1 -1
View File
@@ -1,7 +1,7 @@
{{ if .Vars.rhel9cis_level_1 }}
{{ if .Vars.rhel9cis_rule_1_1_5_1 }}
mount:
/tmp:
/var/log:
title: |
1.1.5.2 | Ensure nodev option set on /var/log partition
1.1.5.3 | Ensure noexec option set on /var/log partition
+1 -1
View File
@@ -1,7 +1,7 @@
{{ if .Vars.rhel9cis_level_2 }}
{{ if .Vars.rhel9cis_rule_1_1_6_1 }}
mount:
/var:
/var/log/audit:
title: 1.1.6.1 | Ensure separate partition exists for /var/log/audit
exists: true
opts:
+1 -1
View File
@@ -1,7 +1,7 @@
{{ if .Vars.rhel9cis_level_1 }}
{{ if .Vars.rhel9cis_rule_1_1_6_1 }}
mount:
/tmp:
/var/log/audit:
title: |
1.1.6.2 | Ensure nodev option set on /var/log/audit partition
1.1.6.3 | Ensure noexec option set on /var/log/audit partition
+1 -1
View File
@@ -1,7 +1,7 @@
{{ if .Vars.rhel9cis_level_2 }}
{{ if .Vars.rhel9cis_rule_1_1_7_1 }}
mount:
/var:
/home:
title: 1.1.7.1 | Ensure separate partition exists for /home
exists: true
opts: