[PATCH 03/25] Mapped CCI-001250 to kernel_module_usb-storage_disabled.
Shawn Wells
shawn at redhat.com
Wed Jun 27 22:21:21 UTC 2012
On 6/27/12 6:18 PM, Willy Santos wrote:
> CCI-001250 requires the OS to not allow users to introduce removable media into the information system. Disabling the usb-storage kernel module to be automatically loaded on-demand, preventing the use of USB storage devices by users.
I would also map this to the disablement of automounter.
More information about the scap-security-guide
mailing list