Detections
Analytics

1.301 OL08-00-040080

Information

OL 8 must be configured to disable the ability to use USB mass storage devices.

GROUP ID: V-248837
RULE ID: SV-248837r986386

USB mass storage permits easy introduction of unknown devices, thereby facilitating malicious activity.

Solution

Configure OL 8 to disable the ability to use the USB Storage kernel module and to use USB mass storage devices.

$ sudo vi /etc/modprobe.d/blacklist.conf

Add or update the lines:

install usb-storage /bin/false blacklist usb-storage

Reboot the system for the settings to take effect.

See Also

https://workbench.cisecurity.org/benchmarks/23791

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-3, CAT|II, CCI|CCI-000778, CCI|CCI-003959, Rule-ID|SV-248837r986386_rule, STIG-ID|OL08-00-040080, Vuln-ID|V-248837

Plugin: Unix

Control ID: 1b8261dda9c9387d6904a92ca2f8704dc01ac71ec18b664c6fc612151e317748