Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Product Name

CIS Build Kit

Product Version

RHEL 7 & 8

Date

20 Jul



Problem

Info

After applying a Build Kit to a RHEL image in Azure, the system now boots in emergency mode

Solution

Remove the below script and execute the hardening script, otherwise server will go to emergency mode.

Remove -
/root/CISHardening/CIS-LBK/RHEL8/functions/recommendations/nix_vfat_filesystem_disabled_rec.sh 

In Azure environment, there is a filesystem /boot/efi” efi which is having uses vfat format by default. The above script is creating the kernel module, which is blocking to mount the mandatory /boot/efi filesystem which leads emergency.

Server Emergency mode https://access.redhat.com/solutions/3215551

Note

Please note that you will need to make adjustments when using Build Kits in the cloud. https://cisecurity.atlassian.net/l/cp/QrE9gPDu

Keywords; Build Kit Linux Cloud CSP RHEL

Content by Label

Filter by label (Content by label)
showLabelsfalse
showSpacefalse
cqllabel = "sbp_fer"

Copyright © 2020 2022

Center for Internet Security®


Page Properties
hiddentrue

Action

Name(s)

Date

Linked ticket

Jira Legacy
serverSystem JIRA
serverIdb90ca2a8-9df7-3869-89db-c424866c1b16
keySUPPORT-20494

Created by

Nick Romanzo

July 2022

Reviewed by

Amanda McGown Andrew Dannenberger Allan Cornwell Parami Swenson (Unlicensed) Perfect Tangban (Unlicensed)

Approved by

Amanda McGown

Remove by