[PATCH] [RHEL/6] Search for nousb kernel command line argument in /etc/grub.conf within bootloader_nousb_argument check case-insensitively

Shawn Wells shawn at redhat.com
Thu Apr 17 18:57:47 UTC 2014


On 4/17/14, 5:11 AM, Trevor Vaughan wrote:
> Just out of curiosity, is adding nousb to the grub command line 
> actually feasible for enforcement?

Virtual machines.

> I can't remember the last time I used a system where I didn't need a 
> USB keyboard at some point (can you even buy server class systems with 
> PS/2 support any more?)

Complete agreement, and acknowledgement in the rule's description:
> /*WARNING:*Disabling all kernel support for USB will cause problems 
> for systems with USB-based keyboards, mice, or printers. This 
> configuration is infeasible for systems which require USB devices, 
> which is common./

Patches welcome which clarify/balance physical deployments vs VMs.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140417/5c336337/attachment.html>


More information about the scap-security-guide mailing list