UBTU-16-010580 - Automatic mounting of Universal Serial Bus (USB) mass storage driver must be disabled - modprobe

Information

Without authenticating devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity.

Peripherals include, but are not limited to, such devices as flash drives, external storage, and printers.

Solution

Disable the mounting of the Universal Serial Bus (USB) mass storage driver by running the following command:

# sudo echo 'install usb-storage /bin/true' >> /etc/modprobe.d/DISASTIG.conf

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_16-04_LTS_V2R3_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-3, CAT|II, CCI|CCI-001958, Rule-ID|SV-214990r610931_rule, STIG-ID|UBTU-16-010580, STIG-Legacy|SV-90211, STIG-Legacy|V-75531, Vuln-ID|V-214990

Plugin: Unix

Control ID: da2093003b20a677e4d8ae88a26191e2371dbf36f3040ec21ce84f81e033821f