Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Guide to the Secure Configuration of Red Hat Enterprise Linux 7
System Settings
GRUB2 bootloader configuration
Non-UEFI GRUB2 bootloader configuration
Boot Loader Is Not Installed On Removeable Media
Boot Loader Is Not Installed On Removeable Media
An XCCDF Rule
Details
Profiles
Prose
Boot Loader Is Not Installed On Removeable Media
Medium Severity
The system must not allow removable media to be used as the boot loader. Remove alternate methods of booting the system from removable media.
usb0
,
cd
,
fd0
, etc. are some examples of removeable media which should not exist in the lines:
set root='hd0,msdos1'