content icon indicating copy to clipboard operation
content copied to clipboard

Allow and use UUIDs for mount options and point remedations

Open Mab879 opened this issue 1 year ago • 2 comments

Share the context

RHEL (and other distros) by default use UUIDs to identify partitions and disks /etc/fstab this allows the system to be resilient and able to adapt to change if the devices are plugged into the system in a different order than when the system was installed.

Description of problem:

When our content adds mount options like nodev we replace the UUID with the device id of something like /dev/sda. This makes the system less resilient to change.

Proposed change:

Our remediation use UUID="..." vs /dev/sdX for remediation of mount points and mount options.

We can use files /dev/disk/by-uuid/ and similar to better help us figure what UUIDs to use in our remedations.

Mab879 avatar Aug 06 '24 21:08 Mab879

This is a major problem, NOT an enhancement. It is causing systems to become unbootable and enter emergency mode (which is locked out per another STIG) after this STIG is applied if disks are attached or detached. This is also in conflict with Red Hat's guidance, because they warn that using /dev/sdX is NOT persistent. This completely overwrites the UUID if fstab contains a UUID.

GitYukari avatar Oct 03 '24 15:10 GitYukari

Agreed, this is a bug.

I have removed the enhancement, label.

From my quick testing it appears that this only affects the bash remediation, not the Ansible. So for the time being it might better to use those.

Mab879 avatar Oct 10 '24 14:10 Mab879