# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_almalinux,multi_platform_rhv,multi_platform_ubuntu,multi_platform_sle,multi_platform_slmicro
# reboot = true
# strategy = disable
# complexity = low
# disruption = medium
- name: Ensure kernel module 'usb-storage' is disabled
  ansible.builtin.lineinfile:
    create: yes
    dest: "/etc/modprobe.d/usb-storage.conf"
    regexp: 'install\s+usb-storage'
    line: "install usb-storage /bin/false"

- name: Ensure kernel module 'usb-storage' is blacklisted
  ansible.builtin.lineinfile:
    create: yes
    dest: "/etc/modprobe.d/usb-storage.conf"
    regexp: '^blacklist usb-storage$'
    line: "blacklist usb-storage"
