STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SLEM 5 wireless network adapters must be disabled unless approved and documented.

DISA Rule

SV-261346r1184409_rule

Vulnerability Number

V-261346

Group Title

SRG-OS-000299-GPOS-00117

Rule Version

SLEM-05-291010

Severity

CAT II

CCI(s)

CCI-001444 - Protect wireless access to the system using encryption.
CCI-001443 - Protect wireless access to the system using authentication of users and/or devices.
CCI-002418 - Protect the confidentiality and/or integrity of transmitted information.

Weight

Fix Recommendation

Configure SLEM 5 to disable all wireless network interfaces.

Run "nmcli device status" and note the device name from the DEVICE column for any wireless devices (e.g., wlan0).

Set the device to unmanaged using the device name:
> sudo nmcli device set wlan0 managed no

Set the software switches to "off" with the following commands:
> sudo nmcli radio wwan off
> sudo nmcli radio wifi off

Check Contents

Verify SLEM 5 has no wireless network adapters enabled.

Check the status of all network devices with this command:
> nmcli device status
DEVICE TYPE STATE CONNECTION
eth0 ethernet connected Wired connection 1
lo loopback unmanaged --

If there is a device listed with a type of "wifi", and it is not documented and approved as an operational requirement with the authorizing official (AO), this is a finding.

Check the status of the software switches with the following command:
> nmcli radio
WIFI-HW WIFI WWAN-HW WWAN
missing disabled missing disabled

If any wireless devices are "enabled" that are not documented and approved as an operational requirement with the AO, this is a finding.

Vulnerability Number

V-261346

Documentable

False

Rule Version

SLEM-05-291010

Severity Override Guidance

Check Content Reference

Target Key

5596