Skip to content

Commit ff3310d

Browse files
committed
Clarification in describe_module_disable macro
1 parent ec4d15c commit ff3310d

1 file changed

Lines changed: 5 additions & 0 deletions

File tree

shared/macros/01-general.jinja

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -351,6 +351,11 @@ Describe allowing access to a service in firewalld.
351351
To configure the system to prevent the <code>{{{ module }}}</code>
352352
kernel module from being loaded, add the following line to the file <code>/etc/modprobe.d/{{{ module }}}.conf</code>:
353353
<pre>install {{{ module }}} /bin/false</pre>
354+
This entry will cause cause a non-zero return value during a <code>{{{ module }}}</code> module installation
355+
and additionally convey the meaning of the entry to the user in form of an error message.
356+
If you would like to omit a non-zero return value and an error message, you may want to add a different line instead
357+
(both <code>/bin/true</code> and <code>/bin/false</code> are allowed by OVAL and will be accepted by the scan):
358+
<pre>install {{{ module }}} /bin/true</pre>
354359
{{% if "ol" in product or product in ["rhel8"] %}}
355360
To configure the system to prevent the <code>{{{ module }}}</code> from being used,
356361
add the following line to file <code>/etc/modprobe.d/{{{ module }}}.conf</code>:

0 commit comments

Comments
 (0)