GEN008680 - If the system boots from removable media, it must be stored in a safe or similarly secured container.

Information

Storing the boot loader on removable media in an insecure location could allow a malicious user to modify the systems boot instructions or boot to an insecure operating system.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Store the system boot media in a secure container when not in use.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_5_V2R1_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CM-6b., 800-53|SC-32, CAT|I, CCI|CCI-000366, CCI|CCI-001208, Rule-ID|SV-218723r603259_rule, STIG-ID|GEN008680, STIG-Legacy|SV-63107, STIG-Legacy|V-4255, Vuln-ID|V-218723

Plugin: Unix

Control ID: 1b162fca57b578b7c0bfb3d01af374780296b031402fad44f2037ad75f08d090