<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 4/16/14, 5:08 PM, Kayse, Josh wrote:<br>
</div>
<blockquote
cite="mid:F2292B4C-DB50-46A5-B170-43C21E31A863@gtri.gatech.edu"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<br>
<div>
<div>On Apr 16, 2014, at 8:06 PM, Kayse, Josh <<a
moz-do-not-send="true"
href="mailto:Joshua.Kayse@gtri.gatech.edu">Joshua.Kayse@gtri.gatech.edu</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space;
-webkit-line-break: after-white-space;">
<br>
<div>
<div>On Apr 16, 2014, at 7:59 PM, Shawn Wells <<a
moz-do-not-send="true" href="mailto:shawn@redhat.com">shawn@redhat.com</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 4/16/14, 5:44 AM, Jan
Lieskovsky wrote:<br>
</div>
<blockquote
cite="mid:114760271.8781800.1397652286912.JavaMail.zimbra@redhat.com"
type="cite">
<pre wrap="">Patch summary:
* check for 'nousb' argument on kernel command line in /etc/grub.conf
within the bootloader_nousb_argument check in a case-insensitive way
* update comments where appropriate
* add test attestation timestamp
* replace path + filename ind construct with filepath one
Testing report:
* Tested on RHEL-6. Works fine.
</pre>
</blockquote>
<br>
I wasn't sure if nousb was case insensitive, so I
checked <a moz-do-not-send="true"
class="moz-txt-link-freetext"
href="https://www.kernel.org/doc/Documentation/kernel-parameters.txt">
https://www.kernel.org/doc/Documentation/kernel-parameters.txt</a><br>
<br>
And found this:<br>
<blockquote type="cite">
<pre style="font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; white-space: pre-wrap;">Note that ALL kernel parameters listed below are CASE SENSITIVE, and that
a trailing = on the name of any parameter states that that parameter will
be entered as an environment variable, whereas its absence indicates that
it will appear as a kernel argument readable via /proc/cmdline by programs
running once the system is up.</pre>
</blockquote>
<br>
"nousb" was in the list as case sensitive.<br>
<br>
Applied your patch (RHEL 6.5), added "nOuSB," and
things seem to check out. Should we follow the kernel
docs (which say case sensitive), or allow
insensitivity since it actually works?<br>
<br>
</div>
_______________________________________________<br>
scap-security-guide mailing list<br>
<a moz-do-not-send="true"
href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
<a moz-do-not-send="true"
href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
</blockquote>
</div>
<br>
<div>I’d like to point out that the selinux parameter is
also within that list. I vote we should follow what
actually works and assume the kernel docs are out of date.</div>
<div><br>
</div>
<div>-josh<br>
</div>
</div>
</blockquote>
</div>
<br>
<div>Also, according to <a moz-do-not-send="true"
href="https://github.com/torvalds/linux/blame/master/Documentation/kernel-parameters.txt">https://github.com/torvalds/linux/blame/master/Documentation/kernel-parameters.txt</a> that
line was last changed 2005. Perhaps someone should brave lkml
and submit a patch.</div>
<div><br>
</div>
<div>-josh</div>
</blockquote>
<br>
Thanks for that link!<br>
<br>
Ack to Jan's patch.<br>
<br>
<br>
</body>
</html>