ansible-role-cis icon indicating copy to clipboard operation
ansible-role-cis copied to clipboard

Published 20 hours ago • verified publisher icon robertdebock

Verify if there is an active mount before deactivating filesystems

Open arturmartins opened this issue 5 years ago • 2 comments

It would be nice to guarantee that there is no active mount of the filesystem before removing its support from the kernel.

https://github.com/robertdebock/ansible-role-cis/blob/bf05e8f2cf36fe643b40a28ab0ad06434469b784/tasks/CentOS-8/initial_setup.yml#L4

WDYT?

arturmartins avatar Aug 09 '20 23:08 arturmartins

About content: "install cramfs /bin/true":

This is described in the CIS guidelines.

I think it's a fair remark. Do you think you could write a pull-request for that?

I'll keep the issue open in case I need to follow-up.

robertdebock avatar Aug 10 '20 14:08 robertdebock

On the other hand, modprobe will just fail if a the module is in use, which is sort of okay right?

robertdebock avatar Aug 10 '20 14:08 robertdebock