Ubuntu 22.04 LTS must disable automatic mounting of Universal Serial Bus (USB) mass storage driver.
An XCCDF Rule
Description
Without authenticating devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity. Peripherals include, but are not limited to, such devices as flash drives, external storage, and printers.
- ID
- SV-260540r986276_rule
- Version
- UBTU-22-291010
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure Ubuntu 22.04 LTS to disable using the USB storage kernel module.
Create and/or append a custom file under "/etc/modprobe.d/" to contain the following:
$ sudo su -c "echo install usb-storage /bin/false >> /etc/modprobe.d/stig.conf"