Detections
Analytics

RHEL-08-040080 - RHEL 8 must be configured to disable USB mass storage.

Information

USB mass storage permits easy introduction of unknown devices, thereby facilitating malicious activity.

Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163

Solution

Configure the operating system to disable the ability to use the USB Storage kernel module and the ability to use USB mass storage devices.

Add or update the following lines in the file "/etc/modprobe.d/blacklist.conf":

 install usb-storage /bin/false
 blacklist usb-storage

Reboot the system for the settings to take effect.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_8_V2R7_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-3, CAT|II, CCI|CCI-000778, Rule-ID|SV-230503r1069316_rule, STIG-ID|RHEL-08-040080, Vuln-ID|V-230503

Plugin: Unix

Control ID: 2d990a842213b373f6d3ae359d28f218c97eb7deb300913360f6ea7acd229d66