aacea9495f
This patch disables the usb-storage module by default. Documentation is included. Implements: blueprint security-rhel7-stig Change-Id: I2fdc1854506972a33c81ca25ea08467a6f49cad2
15 lines
332 B
ReStructuredText
15 lines
332 B
ReStructuredText
---
|
|
id: RHEL-07-020160
|
|
status: opt-in
|
|
tag: kernel
|
|
---
|
|
|
|
The tasks in the security role disable the ``usb-storage`` module and the
|
|
change is applied the next time the server is rebooted.
|
|
|
|
Deployers can opt out of this change by setting the following Ansible variable:
|
|
|
|
.. code-block:: yaml
|
|
|
|
security_rhel7_disable_usb_storage: no
|