diff --git a/controls/srg_ctr/SRG-APP-000141-CTR-000315.yml b/controls/srg_ctr/SRG-APP-000141-CTR-000315.yml index 8b9a6c52c1e..a8e21dd0222 100644 --- a/controls/srg_ctr/SRG-APP-000141-CTR-000315.yml +++ b/controls/srg_ctr/SRG-APP-000141-CTR-000315.yml @@ -9,5 +9,6 @@ controls: - package_usbguard_installed - service_usbguard_enabled - configure_usbguard_auditbackend + - usbguard_allow_hid_and_hub status: automated diff --git a/linux_os/guide/services/usbguard/usbguard_allow_hid_and_hub/rule.yml b/linux_os/guide/services/usbguard/usbguard_allow_hid_and_hub/rule.yml index 9c8f78df519..376f524af24 100644 --- a/linux_os/guide/services/usbguard/usbguard_allow_hid_and_hub/rule.yml +++ b/linux_os/guide/services/usbguard/usbguard_allow_hid_and_hub/rule.yml @@ -29,7 +29,7 @@ identifiers: references: nist: CM-8(3),IA-3 ospp: FMT_SMF_EXT.1 - srg: SRG-OS-000114-GPOS-00059 + srg: SRG-OS-000114-GPOS-00059,SRG-APP-000092-CTR-000165 ocil_clause: 'USB devices of class 3 and 9:00 are not authorized'