From aff7518cb96374b82c24ed2a4c9fc16485b980cb Mon Sep 17 00:00:00 2001 From: Denflorr <130852439+Denflorr@users.noreply.github.com> Date: Fri, 3 Apr 2026 11:34:00 +0200 Subject: [PATCH 1/2] fix: replace undefined LOADED_MODULE_NAME with MODULE_NAME in disable_rds.sh This fixes a bug in disable_rds.sh where the script references an undefined variable: LOADED_MODULE_NAME. When running the script, this results in the following error: disable_rds.sh: line 60: LOADED_MODULE_NAME: unbound variable The correct variable available in the script is MODULE_NAME. This change replaces LOADED_MODULE_NAME with MODULE_NAME to fix the issue. This allows the script to run correctly without triggering an unbound variable error. --- bin/hardening/disable_rds.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/bin/hardening/disable_rds.sh b/bin/hardening/disable_rds.sh index 479a7ee1..8ac06d5f 100755 --- a/bin/hardening/disable_rds.sh +++ b/bin/hardening/disable_rds.sh @@ -57,9 +57,9 @@ apply() { # In an unprivileged container, the kernel modules are host dependent, so you should consider enforcing it ok "Container detected, consider host enforcing!" else - is_kernel_module_loaded "$KERNEL_OPTION" "$LOADED_MODULE_NAME" + is_kernel_module_loaded "$KERNEL_OPTION" "$MODULE_NAME" if [ "$FNRET" -eq 0 ]; then # 0 means true in bash, so it IS activated - crit "$LOADED_MODULE_NAME is loaded!" + crit "$MODULE_NAME is loaded!" warn "I wont unload the module, unload it manually or recompile the kernel if needed" fi From 4347d99d59d0545d5ed43ff5d787cd83f0158ddc Mon Sep 17 00:00:00 2001 From: Denflorr <130852439+Denflorr@users.noreply.github.com> Date: Fri, 3 Apr 2026 11:40:04 +0200 Subject: [PATCH 2/2] fix: replace undefined LOADED_MODULE_NAME with MODULE_NAME in disable_tipc.sh This fixes a bug in disable_tipc.sh where the script references an undefined variable: LOADED_MODULE_NAME. When running the script, this results in the following error: disable_tipc.sh: line 60: LOADED_MODULE_NAME: unbound variable The correct variable available in the script is MODULE_NAME. This change replaces LOADED_MODULE_NAME with MODULE_NAME to fix the issue. This allows the script to run correctly without triggering an unbound variable error. --- bin/hardening/disable_tipc.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/bin/hardening/disable_tipc.sh b/bin/hardening/disable_tipc.sh index 7085b577..4adc2464 100755 --- a/bin/hardening/disable_tipc.sh +++ b/bin/hardening/disable_tipc.sh @@ -57,9 +57,9 @@ apply() { # In an unprivileged container, the kernel modules are host dependent, so you should consider enforcing it ok "Container detected, consider host enforcing!" else - is_kernel_module_loaded "$KERNEL_OPTION" "$LOADED_MODULE_NAME" + is_kernel_module_loaded "$KERNEL_OPTION" "$MODULE_NAME" if [ "$FNRET" -eq 0 ]; then # 0 means true in bash, so it IS activated - crit "$LOADED_MODULE_NAME is loaded!" + crit "$MODULE_NAME is loaded!" warn "I wont unload the module, unload it manually or recompile the kernel if needed" fi