RHEL-08-040080 - RHEL 8 must be configured to disable USB mass storage - blacklist

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

USB mass storage permits easy introduction of unknown devices, thereby facilitating malicious activity.

Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163

Solution

Configure the operating system to disable the ability to use the USB Storage kernel module and the ability to use USB mass storage devices.

Add or update the following lines in the file '/etc/modprobe.d/blacklist.conf':

install usb-storage /bin/true
blacklist usb-storage

Reboot the system for the settings to take effect.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_8_V1R6_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000778, Rule-ID|SV-230503r809319_rule, STIG-ID|RHEL-08-040080, Vuln-ID|V-230503

Plugin: Unix

Control ID: 3442e965ee3f87caa94078a3e2a6003c25089fa4ff421b1a2911c9b7ba50f8f5