openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/source/developer-notes/V-38490.rst
Major Hayden 3120484527 V-3851{4,5,6,7}: Disabling certain network protocols 
This also includes a minor cleanup for V-38490 (disable usb-storage module).

Change-Id: Ie874cbf3c8fb6a69b7d0d674d728876a5d4d1fb7
2015-10-14 13:43:39 +00:00

324 B
Raw Blame History

Exception

Disabling the usb-storage module can add extra security, but it's not necessary on most systems. To disable the usb-storage module on hosts, set the following variable to yes:

disable_module['usb_storage']: yes

NOTE: The module will be disabled on the next reboot.