Audit mounting of removable media in RHEL
Issue
-
To audit the mounting of all removable media. This includes CD/DVD media, USB storage, removable hard disks in to our systems.
-
It should not prevent mounting such media, only create an auditable log of the media's volume name and time of insertion/mount. For workstations, this log will be correlated with which user is logged in at the time for attribution.
Environment
- Red Hat Enterprise Linux 6
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
