Install usbguard Package
An XCCDF Rule
Description
The usbguard package can be installed with the following command:
$ sudo yum install usbguard
Rationale
usbguard is a software framework that helps to protect
against rogue USB devices by implementing basic whitelisting/blacklisting
capabilities based on USB device attributes.
- ID
- xccdf_org.ssgproject.content_rule_package_usbguard_installed
- Severity
- Medium
- References
- Updated
Remediation - Puppet
include install_usbguard
class install_usbguard {
package { 'usbguard':
ensure => 'installed',
}
Remediation - Ansible
- name: Gather the package facts
package_facts:
manager: auto
tags:
- NIST-800-53-CM-8(3)
- NIST-800-53-IA-3
Remediation - OS Build Blueprint
[[packages]]
name = "usbguard"
version = "*"
Remediation - Anaconda Pre-Install Instructions
package --add=usbguard
Remediation - Kubernetes Patch
---
apiVersion: machineconfiguration.openshift.io/v1
kind: MachineConfig
spec:
config:
ignition:
Remediation - Shell Script
# Remediation is applicable only in certain platforms
if ( ! grep -q s390x /proc/sys/kernel/osrelease && rpm --quiet -q kernel ); then
if ! rpm -q --quiet "usbguard" ; then
yum install -y "usbguard"
fi