documentation_complete: true


title: 'Configure the secure_mode_insmod SELinux Boolean'

description: |-
    By default, the SELinux boolean <tt>secure_mode_insmod</tt> is disabled.
    This setting should be configured to {{{ xccdf_value("var_secure_mode_insmod") }}}.
    <br/>{{{ describe_sebool_var(sebool="secure_mode_insmod") }}}

rationale: ""


severity: medium

identifiers:
    cce@rhel8: CCE-83310-3
    cce@rhel9: CCE-84087-6
    cce@sle12: CCE-91576-9
    cce@sle15: CCE-91266-7

{{{ complete_ocil_entry_sebool_var(sebool="secure_mode_insmod") }}}

template:
    name: sebool
    vars:
        seboolid: secure_mode_insmod
    {{% if "ol" in families %}}
    backends:
        ansible: "off"
        bash: "off"
    {{% endif %}}
