On 4/17/14, 5:11 AM, Trevor Vaughan wrote:
Just out of curiosity, is adding nousb to the grub command line actually feasible for enforcement?
Virtual machines.
I can't remember the last time I used a system where I didn't need a USB keyboard at some point (can you even buy server class systems with PS/2 support any more?)
Complete agreement, and acknowledgement in the rule's description:
/*WARNING:*Disabling all kernel support for USB will cause problems for systems with USB-based keyboards, mice, or printers. This configuration is infeasible for systems which require USB devices, which is common./
Patches welcome which clarify/balance physical deployments vs VMs.
_______________________________________________ scap-security-guide mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
