rhel8: put sysctl remediations into dropin files

vojtapolasek · vojtapolasek · commit 3881bde2acb4 · 2026-02-03T10:45:26.000+01:00
diff --git a/products/rhel8/product.yml b/products/rhel8/product.yml
@@ -107,3 +107,4 @@ reference_uris:
   cis: 'https://www.cisecurity.org/benchmark/red_hat_linux/'
 
 journald_conf_dir_path: /etc/systemd/journald.conf.d
+sysctl_remediate_drop_in_file: true
diff --git a/tests/data/product_stability/rhel8.yml b/tests/data/product_stability/rhel8.yml
@@ -151,7 +151,7 @@ release_key_fingerprint: 567E347AD0044ADE55BA8A5F199E2F91FD431D51
 rsyslog_cafile: /etc/pki/tls/cert.pem
 sshd_distributed_config: 'false'
 sshd_runtime_check: 'false'
-sysctl_remediate_drop_in_file: 'false'
+sysctl_remediate_drop_in_file: 'true'
 target_oval_version:
 - 5
 - 11

Original file line number	Diff line number	Diff line change
`@@ -107,3 +107,4 @@ reference_uris:`
`107`	`107`	`cis: 'https://www.cisecurity.org/benchmark/red_hat_linux/'`
`108`	`108`
`109`	`109`	`journald_conf_dir_path: /etc/systemd/journald.conf.d`
	`110`	`+sysctl_remediate_drop_in_file: true`