[PATCH] [RHEL/6] Search for nousb kernel command line argument in /etc/grub.conf within bootloader_nousb_argument check case-insensitively
Shawn Wells
shawn at redhat.com
Thu Apr 17 18:57:47 UTC 2014
On 4/17/14, 5:11 AM, Trevor Vaughan wrote:
> Just out of curiosity, is adding nousb to the grub command line
> actually feasible for enforcement?
Virtual machines.
> I can't remember the last time I used a system where I didn't need a
> USB keyboard at some point (can you even buy server class systems with
> PS/2 support any more?)
Complete agreement, and acknowledgement in the rule's description:
> /*WARNING:*Disabling all kernel support for USB will cause problems
> for systems with USB-based keyboards, mice, or printers. This
> configuration is infeasible for systems which require USB devices,
> which is common./
Patches welcome which clarify/balance physical deployments vs VMs.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140417/5c336337/attachment.html>
More information about the scap-security-guide
mailing list