SRG-APP-000141-CTR-000315: allow hid and hub

Select rule USBGuard that authorizes hid and hub devices.
a-skr · Feb 1, 2024 · db5c285 · db5c285
1 parent 6c867ce
commit db5c285
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/controls/srg_ctr/SRG-APP-000141-CTR-000315.yml b/controls/srg_ctr/SRG-APP-000141-CTR-000315.yml
@@ -9,5 +9,6 @@ controls:
   - package_usbguard_installed
   - service_usbguard_enabled
   - configure_usbguard_auditbackend
+  - usbguard_allow_hid_and_hub
   status: automated
 
diff --git a/linux_os/guide/services/usbguard/usbguard_allow_hid_and_hub/rule.yml b/linux_os/guide/services/usbguard/usbguard_allow_hid_and_hub/rule.yml
@@ -29,7 +29,7 @@ identifiers:
 references:
     nist: CM-8(3),IA-3
     ospp: FMT_SMF_EXT.1
-    srg: SRG-OS-000114-GPOS-00059
+    srg: SRG-OS-000114-GPOS-00059,SRG-APP-000092-CTR-000165
 
 ocil_clause: 'USB devices of class 3 and 9:00 are not authorized'