mediumservicesverified ✓rollback-safe
Ensure USBGuard blocks unauthorized peripheral devices
usbguard-block-unauthorized · RHEL ≥ 8 · 1 impl
Description
USBGuard must be installed and active to block unauthorized USB peripheral devices before they can be connected to the system.
Rationale
Unauthorized USB devices can be used to exfiltrate data, inject malware, or perform BadUSB attacks. USBGuard enforces a whitelist policy that blocks all USB devices not explicitly authorized, preventing these attack vectors.
Check → Remediate
Checkservice_state
- name:
- usbguard
- active:
- true
- enabled:
- true
Remediateservice_enabled
- name:
- usbguard
Framework references
STIG
V-258038 / RHEL-09-291030V-230524V-280962 / RHEL-10-200560
NIST 800-53
CM-7SI-3
Live verification
rhel10:checkrhel8:checkrhel9:check
#usbguard#usb#peripherals#security