From 69db20a978e3f60700a01c9100624b87e51446a7 Mon Sep 17 00:00:00 2001 From: Major Hayden Date: Tue, 6 Dec 2016 08:25:49 -0600 Subject: [PATCH] [Docs] Exception: grub on removable media It's not possible to make this change via automated tasks, but documentation is included to remind deployers to avoid placing bootloaders on removable media. Implements: blueprint security-rhel7-stig Change-Id: I09f997f63a4d8520d7cd6fdb71bd6b81062ca144 --- doc/metadata/rhel7/RHEL-07-021760.rst | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/doc/metadata/rhel7/RHEL-07-021760.rst b/doc/metadata/rhel7/RHEL-07-021760.rst index a85dbee6..94490e33 100644 --- a/doc/metadata/rhel7/RHEL-07-021760.rst +++ b/doc/metadata/rhel7/RHEL-07-021760.rst @@ -1,7 +1,9 @@ --- id: RHEL-07-021760 -status: not implemented +status: exception - initial provisioning tag: misc --- -This STIG requirement is not yet implemented. +When a server is initially provisioned, deployers should avoid storing +the boot loader on removable media. It is not possible to change this via +automated tasks.