poshsecurity / cspeculationcontrolfixes Goto Github PK

Prerequisites

Put an X between the brackets on each line to confirm you have completed them:

• The issue is still present in the latest version of the module.
• The issue has not been previously reported.

Description

Convert Mitigations property in Resource SpeculationControlMitigations to Array. It is currently a string

Additional Information

Just to simplify configuration, could you make it an array of strings instead of string?

cSpeculationControlMitigations [String] #ResourceName
{
    Mitigations = [string]
    Status = [string]
    [DependsOn = [string[]]]
    [PsDscRunAsCredential = [PSCredential]]
}

Prerequisites

Put an X between the brackets on each line to confirm you have completed them:

• The issue is still present in the latest version of the module.
• The issue has not been previously reported.

Description

Need support for additional speculation fixes as provided by Microsoft.

System Details:

Operating System: Windows

Operating System Version: Windows 10

PowerShell Version: 5.1/DSC

Architecture for PowerShell Session: 64bit & 32bit

Is this system an Azure Worker?: No

Other loaded modules: N/A

Additional Information

None

Prerequisites

Put an X between the brackets on each line to confirm you have completed them:

• The issue is still present in the latest version of the module.
• The issue has not been previously reported.

Description

The Set-TargetResource includes $global:DSCMachineStatus = 1 and forces a reboot of the node if LCM is configured with RebootNodeIfNeeded = $true

This should not be set in the resource but instead let users decide if you want to restart the node and call a separate reboot resoruce

Suggestion: Remove $global:DSCMachineStatus = 1 from Set-TargetResource