openstack/ansible-hardening
Code Issues Proposed changes
Files
0e8feaf9eb5265dcef8682d596e62063f7120a92
ansible-hardening/doc/metadata/rhel7/RHEL-07-020160.rst
Major Hayden aacea9495f Disable usb-storage module [+Docs] 
This patch disables the usb-storage module by default. Documentation
is included.

Implements: blueprint security-rhel7-stig
Change-Id: I2fdc1854506972a33c81ca25ea08467a6f49cad2
2016-11-29 14:53:45 -06:00

332 B
Raw Blame History

---id: RHEL-07-020160 status: opt-in tag: kernel ---

The tasks in the security role disable the usb-storage module and the change is applied the next time the server is rebooted.

Deployers can opt out of this change by setting the following Ansible variable:

security_rhel7_disable_usb_storage: no