OL08-00-040080 - OL 8 must be configured to disable the ability to use USB mass storage devices - install usb-storage /bin/true

Information

USB mass storage permits easy introduction of unknown devices, thereby facilitating malicious activity.

Solution

Configure OL 8 to disable the ability to use the USB Storage kernel module and to use USB mass storage devices.

$ sudo vi /etc/modprobe.d/blacklist.conf

Add or update the lines:

install usb-storage /bin/true
blacklist usb-storage

Reboot the system for the settings to take effect.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_8_V1R2_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-3, CAT|II, CCI|CCI-000778, Rule-ID|SV-248837r818697_rule, STIG-ID|OL08-00-040080, Vuln-ID|V-248837

Plugin: Unix

Control ID: 0b80002c3b5cfc870418e5547deb10fed7eb9a8f02a241d4e8445e4d1022196d