Skip to content

Commit 8e3a25a

Browse files
Merge pull request #167 from dev-sec/micheelengronne-patch-1
missing inputs changed
2 parents 4b079b3 + e679f92 commit 8e3a25a

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

controls/os_spec.rb

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
false
3434
end
3535

36-
blacklist = attribute(
36+
blacklist = input(
3737
'blacklist',
3838
value: suid_blacklist.default,
3939
description: 'blacklist of suid/sgid program on system'
@@ -57,19 +57,19 @@
5757
# /var/tmp v v v
5858
#---------------------------------------------------------
5959

60-
mount_exec_blocklist = attribute(
60+
mount_exec_blocklist = input(
6161
'mount_exec_blocklist',
6262
value: ['/boot', '/dev', '/dev/shm', '/tmp', '/var/log', '/var/log/audit', '/var/tmp'],
6363
description: 'List of mountspoints where \'noexec\' mount option shoud be set'
6464
)
6565

66-
mount_suid_blocklist = attribute(
66+
mount_suid_blocklist = input(
6767
'mount_suid_blocklist',
6868
value: ['/boot', '/dev', '/dev/shm', '/home', '/run', '/tmp', '/var', '/var/log', '/var/log/audit', '/var/tmp'],
6969
description: 'List of mountpoints where \'nosuid\' mount option shoud be set'
7070
)
7171

72-
mount_dev_blocklist = attribute(
72+
mount_dev_blocklist = input(
7373
'mount_dev_blocklist',
7474
value: ['/boot', '/dev/shm', '/home', '/run', '/tmp', '/var', '/var/log', '/var/log/audit', '/var/tmp'],
7575
description: 'List of mountpoints where \'nodev\' mount option shoud be set'

0 commit comments

Comments
 (0)