Detections
Analytics
UBTU-22-291010 - Ubuntu 22.04 LTS must disable automatic mounting of Universal Serial Bus (USB) mass storage driver.
Information
Without authenticating devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity.Peripherals include, but are not limited to, such devices as flash drives, external storage, and printers.
Solution
Configure Ubuntu 22.04 LTS to disable using the USB storage kernel module.Create and/or append a custom file under "/etc/modprobe.d/" to contain the following:
$ sudo su -c "echo install usb-storage /bin/false >> /etc/modprobe.d/stig.conf"
Configure Ubuntu 22.04 LTS to disable the ability to use USB mass storage devices.
$ sudo su -c "echo blacklist usb-storage >> /etc/modprobe.d/stig.conf"
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_22-04_LTS_V2R8_STIG.zip
Item Details
Audit Name: DISA Canonical Ubuntu 22.04 LTS STIG v2r8
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-3, CAT|II, CCI|CCI-001958, CCI|CCI-003959, Rule-ID|SV-260540r986276_rule, STIG-ID|UBTU-22-291010, Vuln-ID|V-260540
Plugin: Unix
Control ID: 879ae875dda1648dad46bc861683140e58f1fb9327cce491df020a0638f28236