remove sebool_secure_mode_insmod from RHEL ANSSI high

rumch-se · Aug 17, 2023 · 08b9f87 · 08b9f87
1 parent c82c20e
commit 08b9f87
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/products/rhel8/profiles/anssi_bp28_high.profile b/products/rhel8/profiles/anssi_bp28_high.profile
@@ -17,3 +17,5 @@ description: |-
 
 selections:
     - anssi:all:high
+    # the following rule renders UEFI systems unbootable
+    - '!sebool_secure_mode_insmod'
diff --git a/products/rhel9/profiles/anssi_bp28_high.profile b/products/rhel9/profiles/anssi_bp28_high.profile
@@ -17,3 +17,5 @@ description: |-
 
 selections:
     - anssi:all:high
+    # the following rule renders UEFI systems unbootable
+    - '!sebool_secure_mode_insmod'