The Oracle Linux operating system must be configured to disable USB mass storage.
An XCCDF Rule
Description
USB mass storage permits easy introduction of unknown devices, thereby facilitating malicious activity. Satisfies: SRG-OS-000114-GPOS-00059, SRG-OS-000378-GPOS-00163, SRG-OS-000480-GPOS-00227
- ID
- SV-221712r958498_rule
- Version
- OL07-00-020100
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the operating system to disable the ability to use the USB Storage kernel module.
Create a file under "/etc/modprobe.d" with the following command:
# touch /etc/modprobe.d/usb-storage.conf