mirror of
https://github.com/dev-sec/linux-baseline
synced 2024-11-23 03:33:02 +00:00
cc989d80a7
On UEFI-systems the boot-partition is FAT by default (see [here](https://wiki.archlinux.org/index.php/Unified_Extensible_Firmware_Interface/System_partition)). If we disable vfat, these systems become unbootable. This has already bitten some users using ansible-os-hardening (https://github.com/dev-sec/ansible-os-hardening/issues/162, https://github.com/dev-sec/ansible-os-hardening/issues/145). Therefore I propose we do not check for a disabled vfat filesystem, if efi is used on these systems |
||
---|---|---|
.. | ||
os_spec.rb | ||
package_spec.rb | ||
sysctl_spec.rb |