CCE-90723-8Platform: rhel7,centos7 | Date: (C)2017-06-29 (M)2022-10-10 |
Disable Kernel Support for USB via Bootloader Configuration
All USB support can be disabled by adding the 'nousb'
argument to the kernel's boot loader configuration. To do so,
append "nousb" to the kernel line in '/etc/grub.conf' as shown:
'kernel /vmlinuz-
Parameter:
Technical Mechanism:
Disabling the USB subsystem within the Linux kernel at system boot will
protect against potentially malicious USB devices, although it is only practical
in specialized systems.
Fix:
No Remediation Info
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:30413 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:31136 |