CCI-001250 requires the OS to not allow users to introduce removable media into the
information system. Disabling USB boot in BIOS prevent the use of USB storage devices to
boot the system.
Signed-off-by: Willy Santos <wsantos(a)redhat.com>
---
rhel6/src/input/system/permissions/mounting.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/rhel6/src/input/system/permissions/mounting.xml
b/rhel6/src/input/system/permissions/mounting.xml
index 20d4307..e77e404 100644
--- a/rhel6/src/input/system/permissions/mounting.xml
+++ b/rhel6/src/input/system/permissions/mounting.xml
@@ -111,7 +111,7 @@ any security measures offered by the native OS. Attackers could mount
partitions
configuration of the native OS. The BIOS should be configured to disallow booting from
USB media.</rationale>
<ident cce="3944-6" />
<!-- <oval id="bios_disable_usb_boot" /> -->
-<ref nist="CM-6, CM-7" />
+<ref nist="CM-6, CM-7" disa="1250" />
</Rule>
<Rule id="service_autofs_disabled">
--
1.7.7.6