mediumservicesverified ✓rollback-safe
Ensure USBGuard service is enabled
usbguard-enabled · RHEL ≥ 8 · 1 impl
Description
The usbguard service must be enabled to enforce USB device authorization policies.
Rationale
Without USBGuard running, USB device authorization policies are not enforced, allowing any USB device to connect.
Check → Remediate
Checkservice_state
- name:
- usbguard
- enabled:
- true
- active:
- true
Remediateservice_enabled
- name:
- usbguard
Framework references
STIG
V-280963 / RHEL-10-200561V-258036V-244548
NIST 800-53
CM-7IA-3
Live verification
rhel8:checkrhel9:check
#service#usb#security