Skip to content

Commit e3667e1

Browse files
committed
Rule: mount_option_boot_efi_nosuid, remove "uefi" platform
The rule does not care about /sys/firmware/efi, so we should not use existence of this directory as a guardian. Moreover following the logic of "mount_option" template the rule will check and remediate options only if mount point is active/present in /etc/fstab. That's enough to not interfere with non-UEFI systems.
1 parent 4d3c174 commit e3667e1

File tree

1 file changed

+0
-2
lines changed
  • linux_os/guide/system/permissions/partitions/mount_option_boot_efi_nosuid

1 file changed

+0
-2
lines changed

linux_os/guide/system/permissions/partitions/mount_option_boot_efi_nosuid/rule.yml

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,8 +28,6 @@ references:
2828
stigid@ol8: OL08-00-010572
2929
stigid@rhel8: RHEL-08-010572
3030

31-
platform: uefi
32-
3331
template:
3432
name: mount_option
3533
vars:

0 commit comments

Comments
 (0)