template_BASH_mount_option_removable_partitions

# platform = multi_platform_all
# reboot = false

# Include source function library.
. /usr/share/scap-security-guide/remediation_functions

{{{ bash_instantiate_variables("var_removable_partition") }}}

device_regex="^\s*$var_removable_partition\s\+"
mount_option="{{{ MOUNTOPTION }}}"

if grep -q $device_regex /etc/fstab ; then
    previous_opts=$(grep $device_regex /etc/fstab | awk '{print $4}')
    sed -i "s|\($device_regex.*$previous_opts\)|\1,$mount_option|" /etc/fstab
else
    echo "Not remediating, because there is no record of $var_removable_partition in /etc/fstab" >&2
    return 1
fi