|
 |
9be3b2 |
From 7189a9f4aa319b823e241ca11a798762bd62515f Mon Sep 17 00:00:00 2001
|
|
|
9be3b2 |
From: Matej Tyc <matyc@redhat.com>
|
|
|
9be3b2 |
Date: Tue, 31 Aug 2021 13:58:00 +0200
|
|
|
9be3b2 |
Subject: [PATCH] Allow HID USB in the ISM profile
|
|
|
9be3b2 |
|
|
|
9be3b2 |
The usbguard is too strict without this rule,
|
|
|
9be3b2 |
and its default setting blocks keyboard and mouse.
|
|
|
9be3b2 |
---
|
|
|
9be3b2 |
products/rhel8/profiles/ism_o.profile | 1 +
|
|
|
9be3b2 |
products/rhel9/profiles/ism_o.profile | 1 +
|
|
|
9be3b2 |
2 files changed, 2 insertions(+)
|
|
|
9be3b2 |
|
|
|
9be3b2 |
diff --git a/products/rhel8/profiles/ism_o.profile b/products/rhel8/profiles/ism_o.profile
|
|
|
9be3b2 |
index 95cdfc4ede..2e78dc8776 100644
|
|
|
9be3b2 |
--- a/products/rhel8/profiles/ism_o.profile
|
|
|
9be3b2 |
+++ b/products/rhel8/profiles/ism_o.profile
|
|
|
9be3b2 |
@@ -52,6 +52,7 @@ selections:
|
|
|
9be3b2 |
## Identifiers 1418
|
|
|
9be3b2 |
- package_usbguard_installed
|
|
|
9be3b2 |
- service_usbguard_enabled
|
|
|
9be3b2 |
+ - usbguard_allow_hid_and_hub
|
|
|
9be3b2 |
|
|
|
9be3b2 |
## Authentication hardening
|
|
|
9be3b2 |
## Identifiers 1546 / 0974 / 1173 / 1504 / 1505 / 1401 / 1559 / 1560
|
|
|
9be3b2 |
diff --git a/products/rhel9/profiles/ism_o.profile b/products/rhel9/profiles/ism_o.profile
|
|
|
9be3b2 |
index 6fc919da12..b395b0e9cb 100644
|
|
|
9be3b2 |
--- a/products/rhel9/profiles/ism_o.profile
|
|
|
9be3b2 |
+++ b/products/rhel9/profiles/ism_o.profile
|
|
|
9be3b2 |
@@ -52,6 +52,7 @@ selections:
|
|
|
9be3b2 |
## Identifiers 1418
|
|
|
9be3b2 |
- package_usbguard_installed
|
|
|
9be3b2 |
- service_usbguard_enabled
|
|
|
9be3b2 |
+ - usbguard_allow_hid_and_hub
|
|
|
9be3b2 |
|
|
|
9be3b2 |
## Authentication hardening
|
|
|
9be3b2 |
## Identifiers 1546 / 0974 / 1173 / 1504 / 1505 / 1401 / 1559 / 1560
|