Auto generating the USB Guard rules file on installation.

fcaviggia / hardened-centos7-kickstart

DVD embedded Kickstart for CentOS 7 utilizing SCAP Security Guide (SSG) as a hardening script.

Other

157 stars 58 forks source link

Auto generating the USB Guard rules file on installation. #26

Closed teeram closed 6 years ago

teeram commented 6 years ago

Hi Frank, awesome work on the CentOS hardening tools! USB Guard tends to give me a little grief on installation by disabling my mouse and keyboard. I made a slight modification to automatically generate the USB Guard rules file on installation such that it will allow USB devices that are connected during install. Please let me know if you would like to adopt this change and there is a smarter way of achieving this behavior. I'm happy to re-implement a better solution.

fcaviggia commented 6 years ago

Looks good. Also, a quick opinion - as a contributor, what do you think about changing the licence to APL2 from GPLv2?

teeram commented 6 years ago

I would be in favor of the change to the APL2 license. I think that will make it a little easier to make small tweaks to the source files without having to worry about violating the license by not publishing the changes. Hoping folks will still submit pull requests that would be of benefit to everyone though.

fcaviggia commented 6 years ago

I agree. I am planning to go to the same License as NSA SIMP:

https://github.com/NationalSecurityAgency/SIMP

teeram commented 6 years ago

Ah nice choice, I just read the license and that makes a lot of sense for this project.