Check: GEN008460
AIX 5.3 STIG:
GEN008460
(in version v1 r3)
Title
The system must have USB disabled unless needed. (Cat III impact)
Discussion
USB is a common computer peripheral interface. USB devices may include storage devices that could be used to install malicious software on a system or exfiltrate data.
Check Content
AIX has server USB drivers installed, such as keyboard, mount, and mass media drivers. Determine if the system has USB enabled. # lsdev -C | grep usb # lslpp -l | grep usb If usb filesets are installed on the system, USB is enabled and this is a finding.
Fix Text
Disable USB devices on the system. Use SMIT to remove the following filesets. devices.usbif.* # smitty remove
Additional Identifiers
Rule ID: SV-38833r1_rule
Vulnerability ID: V-22578
Group Title:
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
Number | Title |
---|---|
CM-6 |
Configuration Settings |