From 28e81557504f94efad0755834283c63c72088178 Mon Sep 17 00:00:00 2001 From: Bob Mottram Date: Wed, 30 Nov 2016 18:27:07 +0000 Subject: [PATCH] Modules aren't installed anyway --- src/freedombone-tests | 36 ------------------------------------ src/freedombone-utils-setup | 28 ---------------------------- 2 files changed, 64 deletions(-) diff --git a/src/freedombone-tests b/src/freedombone-tests index ea201eb9..32a1dc39 100755 --- a/src/freedombone-tests +++ b/src/freedombone-tests @@ -574,42 +574,6 @@ function test_stig { output "V-38513" $? ${SETLANG} ################ - ##RHEL-06-000124 - ##The systems local IPv4 firewall must implement a deny-all, allow-by-exception policy for inbound - - grep -r dccp /etc/modprobe.conf /etc/modprobe.d >/dev/null 2>&1 & - - stig_spinner $! - output "V-38514" $? ${SETLANG} - ################ - - ##RHEL-06-000125 - ##The Stream Control Transmission Protocol (SCTP) must be disabled unless required. - - grep -r sctp /etc/modprobe.conf /etc/modprobe.d >/dev/null 2>&1 & - - stig_spinner $! - output "V-38515" $? ${SETLANG} - ################ - - ##RHEL-06-000126 - ##The Reliable Datagram Sockets (RDS) protocol must be disabled unless required. - - grep -r rds /etc/modprobe.conf /etc/modprobe.d >/dev/null 2>&1 & - - stig_spinner $! - output "V-38516" $? ${SETLANG} - ################ - - ##RHEL-06-000127 - ##The Transparent Inter-Process Communication (TIPC) protocol must be disabled unless required. - - grep -r tipc /etc/modprobe.conf /etc/modprobe.d >/dev/null 2>&1 & - - stig_spinner $! - output "V-38517" $? ${SETLANG} - ################ - ##RHEL-06-000138 ##System logs must be rotated daily. diff --git a/src/freedombone-utils-setup b/src/freedombone-utils-setup index 8029c136..e124271d 100755 --- a/src/freedombone-utils-setup +++ b/src/freedombone-utils-setup @@ -428,22 +428,6 @@ function disable_ctrl_alt_del { ln -sf /dev/null /etc/systemd/system/ctrl-alt-del.target } -function disable_dccp { - echo "install dccp /bin/true" > /etc/modprobe.d/dccp.conf -} - -function disable_sctp { - echo "install sctp /bin/true" > /etc/modprobe.d/sctp.conf -} - -function disable_rds { - echo "install rds /bin/true" > /etc/modprobe.d/rds.conf -} - -function disable_tipc { - echo "install tipc /bin/true" > /etc/modprobe.d/tipc.conf -} - function lockdown_permissions { # All commands owned by root if [ -d /bin ]; then @@ -568,18 +552,6 @@ function setup_utils { function_check disable_null_passwords disable_null_passwords - function_check disable_tipc - disable_tipc - - function_check disable_rds - disable_rds - - function_check disable_dccp - disable_dccp - - function_check disable_sctp - disable_sctp - function_check disable_ctrl_alt_del disable_ctrl_alt_del