CCI-001250 requires the OS to not allow users to introduce removable media into the
information system. Disabling USB support via the bootloader prevents the use of USB
storage devices on the system.
Signed-off-by: Willy Santos <wsantos(a)redhat.com>
---
rhel6/src/input/system/permissions/mounting.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/rhel6/src/input/system/permissions/mounting.xml
b/rhel6/src/input/system/permissions/mounting.xml
index 4f28c76..20d4307 100644
--- a/rhel6/src/input/system/permissions/mounting.xml
+++ b/rhel6/src/input/system/permissions/mounting.xml
@@ -96,7 +96,7 @@ disable USB storage devices if they are plugged into the sytem. Support
for thes
should be disabled and the devices themselves should be tightly
controlled.</rationale>
<ident cce="4173-1" />
<oval id="bootloader_nousb_argument" />
-<ref nist="CM-6, CM-7" />
+<ref nist="CM-6, CM-7" disa="1250" />
</Rule>
<Rule id="bios_disable_usb_boot">
--
1.7.7.6