From 7189a9f4aa319b823e241ca11a798762bd62515f Mon Sep 17 00:00:00 2001 From: Matej Tyc Date: Tue, 31 Aug 2021 13:58:00 +0200 Subject: [PATCH] Allow HID USB in the ISM profile The usbguard is too strict without this rule, and its default setting blocks keyboard and mouse. --- products/rhel8/profiles/ism_o.profile | 1 + products/rhel9/profiles/ism_o.profile | 1 + 2 files changed, 2 insertions(+) diff --git a/products/rhel8/profiles/ism_o.profile b/products/rhel8/profiles/ism_o.profile index 95cdfc4ede..2e78dc8776 100644 --- a/products/rhel8/profiles/ism_o.profile +++ b/products/rhel8/profiles/ism_o.profile @@ -52,6 +52,7 @@ selections: ## Identifiers 1418 - package_usbguard_installed - service_usbguard_enabled + - usbguard_allow_hid_and_hub ## Authentication hardening ## Identifiers 1546 / 0974 / 1173 / 1504 / 1505 / 1401 / 1559 / 1560 diff --git a/products/rhel9/profiles/ism_o.profile b/products/rhel9/profiles/ism_o.profile index 6fc919da12..b395b0e9cb 100644 --- a/products/rhel9/profiles/ism_o.profile +++ b/products/rhel9/profiles/ism_o.profile @@ -52,6 +52,7 @@ selections: ## Identifiers 1418 - package_usbguard_installed - service_usbguard_enabled + - usbguard_allow_hid_and_hub ## Authentication hardening ## Identifiers 1546 / 0974 / 1173 / 1504 / 1505 / 1401 / 1559 / 1560