Project Description

The current template shared/templates/sysctl in https://github.com/ComplianceAsCode/content is not chroot aware.

Creating hardened images for distribution to cloud service providers require running security checks and remediation within chroot context. The current template in https://github.com/ComplianceAsCode/content will attempt to run sysctl even with running a chroot mounted system.

Goal for this Hackweek

Produce a upstream PR with changes that will not attempt to run sysctl if image being tested and remediated is on chroot.

Resources

No additional resources are required.