STIGQter: STIG Summary: VMware vRealize Automation 7.x SLES Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

The system must have USB disabled unless needed.

DISA Rule

SV-100255r1_rule

Vulnerability Number

V-89605

Group Title

SRG-OS-000095-GPOS-00049

Rule Version

VRAU-SL-000455

Severity

CAT II

CCI(s)

CCI-000381 - The organization configures the information system to provide only essential capabilities.

Weight

Fix Recommendation

Edit the grub bootloader file /boot/grub/menu.lst by appending the "nousb" parameter to the kernel boot line.

Check Contents

If the system needs USB, this vulnerability is not applicable.

Check if the directory /proc/bus/usb exists.

If the directory /proc/bus/usb exists, this is a finding.

Vulnerability Number

V-89605

Documentable

False

Rule Version

VRAU-SL-000455

Severity Override Guidance

If the system needs USB, this vulnerability is not applicable.

Check if the directory /proc/bus/usb exists.

If the directory /proc/bus/usb exists, this is a finding.

Check Content Reference

Target Key

3459

The system must have USB disabled unless needed.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments