diff --git a/linux_os/guide/system/permissions/mounting/kernel_module_squashfs_disabled/rule.yml b/linux_os/guide/system/permissions/mounting/kernel_module_squashfs_disabled/rule.yml index 5d0c13500902..b314dbdc3d95 100644 --- a/linux_os/guide/system/permissions/mounting/kernel_module_squashfs_disabled/rule.yml +++ b/linux_os/guide/system/permissions/mounting/kernel_module_squashfs_disabled/rule.yml @@ -1,6 +1,6 @@ documentation_complete: true -prodtype: rhel6,rhel7,rhel8,fedora +prodtype: rhel6,rhel7,rhel8,fedora,ocp4 title: 'Disable Mounting of squashfs' diff --git a/linux_os/guide/system/permissions/mounting/kernel_module_usb-storage_disabled/rule.yml b/linux_os/guide/system/permissions/mounting/kernel_module_usb-storage_disabled/rule.yml index c174eba317a5..dba4a2a28ec2 100644 --- a/linux_os/guide/system/permissions/mounting/kernel_module_usb-storage_disabled/rule.yml +++ b/linux_os/guide/system/permissions/mounting/kernel_module_usb-storage_disabled/rule.yml @@ -1,6 +1,6 @@ documentation_complete: true -prodtype: wrlinux1019,rhel6,rhel7,rhel8,fedora,ol7,ol8,rhv4 +prodtype: wrlinux1019,rhel6,rhel7,rhel8,fedora,ol7,ol8,rhv4,ocp4 title: 'Disable Modprobe Loading of USB Storage Driver' diff --git a/ocp4/profiles/moderate.profile b/ocp4/profiles/moderate.profile index e7f9a492e8dd..ad3312a9e211 100644 --- a/ocp4/profiles/moderate.profile +++ b/ocp4/profiles/moderate.profile @@ -607,3 +607,7 @@ selections: - audit_rules_etc_shadow_openat - audit_rules_etc_shadow_open_by_handle_at - directory_access_var_log_audit + + # CM-7 + - kernel_module_usb-storage_disabled + - kernel_module_squashfs_disabled