Detections
Analytics
ALMA-09-031370 - AlmaLinux OS 9 must be configured to disable USB mass storage.
Information
USB mass storage permits easy introduction of unknown devices, thereby facilitating malicious activity.Satisfies: SRG-OS-000095-GPOS-00049, SRG-OS-000378-GPOS-00163, SRG-OS-000114-GPOS-00059, SRG-OS-000690-GPOS-00140
Solution
To configure the system to prevent the usb-storage kernel module from being loaded, run the following command:$ cat << EOF | tee /etc/modprobe.d/usb-storage.conf
install usb-storage /bin/false
blacklist usb-storage
EOF
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CL_AlmaLinux_OS_9_V1R5_STIG.zip
Item Details
Audit Name: DISA Cloud Linux AlmaLinux OS 9 STIG v1r5
Category: CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION
References: 800-53|CM-7a., 800-53|IA-3, CAT|II, CCI|CCI-000381, CCI|CCI-000778, CCI|CCI-001958, CCI|CCI-003959, Rule-ID|SV-269357r1050240_rule, STIG-ID|ALMA-09-031370, Vuln-ID|V-269357
Plugin: Unix
Control ID: f32d04d505db4b366b459cdd0e19a79f98e235bb8836ab0ad444871639e09d5d