<def-group>
  <definition class="compliance"
  id="kernel_module_tipc_disabled" version="1">
    <metadata>
        <title>Disable TIPC Support</title>
        
    <affected family="unix">
    <platform>Ubuntu 22.04</platform>
    </affected>
        <description>The kernel module tipc should be disabled.</description>
    </metadata>
    <criteria operator="OR">
      
      <criteria operator="AND">
        <criterion test_ref="test_kernmod_tipc_blacklisted"
        comment="kernel module tipc blacklisted in modprobe.d" />
        <criterion test_ref="test_kernmod_tipc_disabled"
        comment="kernel module tipc disabled in modprobe.d" />
      </criteria>
      


    </criteria>
  </definition>

  <ind:textfilecontent54_test id="test_kernmod_tipc_disabled" version="1" check="all"
  comment="kernel module tipc disabled">
    <ind:object object_ref="obj_kernmod_tipc_disabled" />
  </ind:textfilecontent54_test>

  <ind:textfilecontent54_object id="obj_kernmod_tipc_disabled"
  version="1" comment="kernel module tipc disabled">
    <ind:path var_ref="var_kernel_module_tipc_paths" var_check="at least one" />
    <ind:filename operation="pattern match">^.*\.conf$</ind:filename>
    <ind:pattern operation="pattern match">^\s*install\s+tipc\s+(/bin/false|/bin/true)$</ind:pattern>
    <ind:instance datatype="int">1</ind:instance>
  </ind:textfilecontent54_object>

  <constant_variable datatype="string" comment="Other paths where kernel modules can be configured"
  id="var_kernel_module_tipc_paths" version="1">
    <value>/etc/modprobe.d</value>
    <value>/etc/modules-load.d</value>
    <value>/run/modprobe.d</value>
    <value>/run/modules-load.d</value>
    <value>/usr/lib/modprobe.d</value>
    <value>/usr/lib/modules-load.d</value>
  </constant_variable>


  <ind:textfilecontent54_test id="test_kernmod_tipc_blacklisted" version="1" check="all"
  comment="kernel module tipc blacklisted">
    <ind:object object_ref="obj_kernmod_tipc_blacklisted" />
  </ind:textfilecontent54_test>

  <ind:textfilecontent54_object id="obj_kernmod_tipc_blacklisted"
  version="1" comment="kernel module tipc blacklisted">
    <ind:path var_ref="var_kernel_module_tipc_paths" var_check="at least one" />
    <ind:filename operation="pattern match">^.*\.conf$</ind:filename>
    <ind:pattern operation="pattern match">^blacklist\s+tipc$</ind:pattern>
    <ind:instance datatype="int">1</ind:instance>
  </ind:textfilecontent54_object>




</def-group>