[PATCH 03/25] Mapped CCI-001250 to kernel_module_usb-storage_disabled.

Shawn Wells shawn at redhat.com
Wed Jun 27 22:21:21 UTC 2012


On 6/27/12 6:18 PM, Willy Santos wrote:
> CCI-001250 requires the OS to not allow users to introduce removable media into the information system. Disabling the usb-storage kernel module to be automatically loaded on-demand, preventing the use of USB storage devices by users.


I would also map this to the disablement of automounter.


More information about the scap-security-guide mailing list