[PATCH 05/25] Mapped CCI-001250 to bootloader_nousb_argument.

Willy Santos wsantos at redhat.com
Wed Jun 27 22:18:15 UTC 2012


CCI-001250 requires the OS to not allow users to introduce removable media into the information system. Disabling USB support via the bootloader prevents the use of USB storage devices on the system.

Signed-off-by: Willy Santos <wsantos at redhat.com>
---
 rhel6/src/input/system/permissions/mounting.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/rhel6/src/input/system/permissions/mounting.xml b/rhel6/src/input/system/permissions/mounting.xml
index 4f28c76..20d4307 100644
--- a/rhel6/src/input/system/permissions/mounting.xml
+++ b/rhel6/src/input/system/permissions/mounting.xml
@@ -96,7 +96,7 @@ disable USB storage devices if they are plugged into the sytem. Support for thes
 should be disabled and the devices themselves should be tightly controlled.</rationale>
 <ident cce="4173-1" />
 <oval id="bootloader_nousb_argument" />
-<ref nist="CM-6, CM-7" />
+<ref nist="CM-6, CM-7" disa="1250" />
 </Rule>
 
 <Rule id="bios_disable_usb_boot">
-- 
1.7.7.6



More information about the scap-security-guide mailing list