GEN008480 - The system must have USB Mass Storage disabled unless needed.

Information

USB is a common computer peripheral interface. USB devices may include storage devices that could be used to install malicious software on a system or exfiltrate data.

Solution

Disable USB mass storage on the system by using SMIT to remove the following filesets.
devices.usbif.010100
devices.usbif.08025002
devices.usbif.080400

# smitty remove

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip