STIGQter: STIG Summary: Red Hat Enterprise Linux 8 Security Technical Implementation Guide Version: 2 Release: 8 Benchmark Date: 01 Jul 2026:

RHEL 8 Bluetooth must be disabled.

DISA Rule

SV-230507r1017287_rule

Vulnerability Number

V-230507

Group Title

SRG-OS-000300-GPOS-00118

Rule Version

RHEL-08-040111

Severity

CAT II

CCI(s)

CCI-001443 - Protect wireless access to the system using authentication of users and/or devices.

Weight

Fix Recommendation

Configure the operating system to disable the Bluetooth adapter when not in use.

Build or modify the "/etc/modprobe.d/bluetooth.conf" file with the following line:

install bluetooth /bin/false

Disable the ability to use the Bluetooth kernel module.

$ sudo vi /etc/modprobe.d/blacklist.conf

Add or update the line:

blacklist bluetooth

Reboot the system for the settings to take effect.

Check Contents

If the device or operating system does not have a Bluetooth adapter installed, this requirement is not applicable.

This requirement is not applicable to mobile devices (smartphones and tablets), where the use of Bluetooth is a local AO decision.

Determine if Bluetooth is disabled with the following command:

$ sudo grep bluetooth /etc/modprobe.d/*
/etc/modprobe.d/bluetooth.conf:install bluetooth /bin/false

If the Bluetooth driver blacklist entry is missing, a Bluetooth driver is determined to be in use, and the collaborative computing device has not been authorized for use, this is a finding.

Verify the operating system disables the ability to use Bluetooth with the following command:

$ sudo grep -r bluetooth /etc/modprobe.d | grep -i "blacklist" | grep -v "^#"
blacklist bluetooth

If the command does not return any output or the output is not "blacklist bluetooth", and use of Bluetooth is not documented with the ISSO as an operational requirement, this is a finding.

Vulnerability Number

V-230507

Documentable

False

Rule Version

RHEL-08-040111

Severity Override Guidance

Check Content Reference

Target Key

2921