STIGQter: STIG Summary: Oracle Linux 8 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

OL 8 Bluetooth must be disabled.

DISA Rule

SV-248843r991569_rule

Vulnerability Number

V-248843

Group Title

SRG-OS-000300-GPOS-00118

Rule Version

OL08-00-040111

Severity

CAT II

CCI(s)

• CCI-001443 - Protect wireless access to the system using authentication of users and/or devices.
• CCI-001444 - Protect wireless access to the system using encryption.
• CCI-002418 - Protect the confidentiality and/or integrity of transmitted information.

Weight

10

Fix Recommendation

Configure the operating system to disable the Bluetooth adapter when not in use.

Build or modify the "/etc/modprobe.d/bluetooth.conf" file with the following line:

install bluetooth /bin/false

Disable the ability to use the Bluetooth kernel module.

$ sudo vi /etc/modprobe.d/blacklist.conf

Add or update the line:

blacklist bluetooth

Reboot the system for the settings to take effect.

Check Contents

If the device or operating system does not have a Bluetooth adapter installed, this requirement is not applicable.

This requirement is not applicable to mobile devices (smartphones and tablets), where the use of Bluetooth is a local AO decision.

Determine if Bluetooth is disabled with the following command:

$ sudo grep -r bluetooth /etc/modprobe.d
/etc/modprobe.d/bluetooth.conf:install bluetooth /bin/false

If the command does not return any output or the line is commented out and the collaborative computing device has not been authorized for use, this is a finding.

Verify the operating system disables the ability to use Bluetooth with the following command:

$ sudo grep -r bluetooth /etc/modprobe.d | grep -i "blacklist" | grep -v "^#"
blacklist bluetooth

If the command does not return any output or the output is not "blacklist bluetooth", and use of Bluetooth is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.

Vulnerability Number

V-248843

Documentable

False

Rule Version

OL08-00-040111

Severity Override Guidance

If the device or operating system does not have a Bluetooth adapter installed, this requirement is not applicable.

This requirement is not applicable to mobile devices (smartphones and tablets), where the use of Bluetooth is a local AO decision.

Determine if Bluetooth is disabled with the following command:

$ sudo grep -r bluetooth /etc/modprobe.d
/etc/modprobe.d/bluetooth.conf:install bluetooth /bin/false

If the command does not return any output or the line is commented out and the collaborative computing device has not been authorized for use, this is a finding.

Verify the operating system disables the ability to use Bluetooth with the following command:

$ sudo grep -r bluetooth /etc/modprobe.d | grep -i "blacklist" | grep -v "^#"
blacklist bluetooth

If the command does not return any output or the output is not "blacklist bluetooth", and use of Bluetooth is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding.

Check Content Reference

M

Target Key

5416