Detections
Analytics

1.251 ALMA-09-031370

Information

AlmaLinux OS 9 must be configured to disable USB mass storage.

GROUP ID: V-269357
RULE ID: SV-269357r1050240

USB mass storage permits easy introduction of unknown devices, thereby facilitating malicious activity.

Satisfies: SRG-OS-000095-GPOS-00049, SRG-OS-000378-GPOS-00163, SRG-OS-000114-GPOS-00059, SRG-OS-000690-GPOS-00140

Solution

To configure the system to prevent the usb-storage kernel module from being loaded, run the following command:

$ cat << EOF | tee /etc/modprobe.d/usb-storage.conf

install usb-storage /bin/false
blacklist usb-storage
EOF

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

References: 800-53|CM-7, 800-53|CM-7a., 800-53|IA-3, CCI|CCI-000381, CCI|CCI-000778, CCI|CCI-001958, CCI|CCI-003959, Rule-ID|SV-269357r1050240_rule, STIG-ID|ALMA-09-031370, Vuln-ID|V-269357

Plugin: Unix

Control ID: 2284a846a9cb17d143bd2f74ce497c5f15a2c95c1d71d8b57b04b31e7d187668