Merge pull request ComplianceAsCode#11001 from vojtapolasek/remove_se…

…bool_insmod_from_anssi Remove sebool_secure_mode_insmod from anssi
rumch-se · Aug 17, 2023 · a57a3c9 · a57a3c9
2 parents c82c20e + 08b9f87
commit a57a3c9
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/products/rhel8/profiles/anssi_bp28_high.profile b/products/rhel8/profiles/anssi_bp28_high.profile
@@ -17,3 +17,5 @@ description: |-
 
 selections:
     - anssi:all:high
+    # the following rule renders UEFI systems unbootable
+    - '!sebool_secure_mode_insmod'
diff --git a/products/rhel9/profiles/anssi_bp28_high.profile b/products/rhel9/profiles/anssi_bp28_high.profile
@@ -17,3 +17,5 @@ description: |-
 
 selections:
     - anssi:all:high
+    # the following rule renders UEFI systems unbootable
+    - '!sebool_secure_mode_insmod'