[CCE 3944-6] Option to disable booting from USB devices

[Fred .]

CCE 3944-6

http://nvd.nist.gov/scap/content/stylesheet/scap-rhel5-document.htm

"An attacker with physical access could try to boot the system from a
USB flash drive and then access any data on the system’s hard drive,
circumventing the normal operating system’s access controls. To
prevent this, configure the BIOS to disallow booting from USB drives.
Also configure the BIOS or firmware password as described in Section
2.3.5.1 to prevent unauthorized configuration changes."