Detections
Analytics
OL08-00-040080 - OL 8 must be configured to disable the ability to use USB mass storage devices.
Information
USB mass storage permits easy introduction of unknown devices, thereby facilitating malicious activity.Solution
Configure OL 8 to disable the ability to use the USB Storage kernel module and to use USB mass storage devices.$ sudo vi /etc/modprobe.d/blacklist.conf
Add or update the lines:
install usb-storage /bin/false
blacklist usb-storage
Reboot the system for the settings to take effect.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_8_V2R8_STIG.zip
Item Details
Audit Name: DISA Oracle Linux 8 STIG v2r8
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-3, CAT|II, CCI|CCI-000778, CCI|CCI-003959, Rule-ID|SV-248837r986386_rule, STIG-ID|OL08-00-040080, Vuln-ID|V-248837
Plugin: Unix
Control ID: 13704b745d58c9029a39cd3a05698470b9abb7ff318bb2805808834bea347d26