<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">On 4/16/14, 5:08 PM, Kayse, Josh wrote:<br>
    </div>
    <blockquote
      cite="mid:F2292B4C-DB50-46A5-B170-43C21E31A863@gtri.gatech.edu"
      type="cite">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      <br>
      <div>
        <div>On Apr 16, 2014, at 8:06 PM, Kayse, Josh &lt;<a
            moz-do-not-send="true"
            href="mailto:Joshua.Kayse@gtri.gatech.edu">Joshua.Kayse@gtri.gatech.edu</a>&gt;
          wrote:</div>
        <br class="Apple-interchange-newline">
        <blockquote type="cite">
          <div style="word-wrap: break-word; -webkit-nbsp-mode: space;
            -webkit-line-break: after-white-space;">
            <br>
            <div>
              <div>On Apr 16, 2014, at 7:59 PM, Shawn Wells &lt;<a
                  moz-do-not-send="true" href="mailto:shawn@redhat.com">shawn@redhat.com</a>&gt;
                wrote:</div>
              <br class="Apple-interchange-newline">
              <blockquote type="cite">
                <div bgcolor="#FFFFFF" text="#000000">
                  <div class="moz-cite-prefix">On 4/16/14, 5:44 AM, Jan
                    Lieskovsky wrote:<br>
                  </div>
                  <blockquote
                    cite="mid:114760271.8781800.1397652286912.JavaMail.zimbra@redhat.com"
                    type="cite">
                    <pre wrap="">Patch summary:
  * check for 'nousb' argument on kernel command line in /etc/grub.conf
    within the bootloader_nousb_argument check in a case-insensitive way
  * update comments where appropriate
  * add test attestation timestamp
  * replace path + filename ind construct with filepath one

Testing report:
  * Tested on RHEL-6. Works fine.
</pre>
                  </blockquote>
                  <br>
                  I wasn't sure if nousb was case insensitive, so I
                  checked <a moz-do-not-send="true"
                    class="moz-txt-link-freetext"
                    href="https://www.kernel.org/doc/Documentation/kernel-parameters.txt">
https://www.kernel.org/doc/Documentation/kernel-parameters.txt</a><br>
                  <br>
                  And found this:<br>
                  <blockquote type="cite">
                    <pre style="font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; white-space: pre-wrap;">Note that ALL kernel parameters listed below are CASE SENSITIVE, and that
a trailing = on the name of any parameter states that that parameter will
be entered as an environment variable, whereas its absence indicates that
it will appear as a kernel argument readable via /proc/cmdline by programs
running once the system is up.</pre>
                  </blockquote>
                  <br>
                  "nousb" was in the list as case sensitive.<br>
                  <br>
                  Applied your patch (RHEL 6.5), added "nOuSB," and
                  things seem to check out. Should we follow the kernel
                  docs (which say case sensitive), or allow
                  insensitivity since it actually works?<br>
                  <br>
                </div>
                _______________________________________________<br>
                scap-security-guide mailing list<br>
                <a moz-do-not-send="true"
                  href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
                <a moz-do-not-send="true"
href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
              </blockquote>
            </div>
            <br>
            <div>I’d like to point out that the selinux parameter is
              also within that list.  I vote we should follow what
              actually works and assume the kernel docs are out of date.</div>
            <div><br>
            </div>
            <div>-josh<br>
            </div>
          </div>
        </blockquote>
      </div>
      <br>
      <div>Also, according to <a moz-do-not-send="true"
href="https://github.com/torvalds/linux/blame/master/Documentation/kernel-parameters.txt">https://github.com/torvalds/linux/blame/master/Documentation/kernel-parameters.txt</a> that
        line was last changed 2005.  Perhaps someone should brave lkml
        and submit a patch.</div>
      <div><br>
      </div>
      <div>-josh</div>
    </blockquote>
    <br>
    Thanks for that link!<br>
    <br>
    Ack to Jan's patch.<br>
    <br>
    <br>
  </body>
</html>