SV-269342r1050224_rule
V-269342
SRG-OS-000095-GPOS-00049
ALMA-09-029720
CAT II
10
To configure the system to prevent the Bluetooth kernel module from being loaded, run the following command:
$ cat << EOF | tee /etc/modprobe.d/bluetooth.conf
install bluetooth /bin/false
blacklist bluetooth
EOF
Verify that AlmaLinux OS 9 disables the ability to load the Bluetooth kernel module with the following command:
$ grep -r bluetooth /etc/modprobe.conf /etc/modprobe.d/*
/etc/modprobe.d/bluetooth.conf:install bluetooth /bin/false
/etc/modprobe.d/bluetooth.conf:blacklist bluetooth
If the command does not return any output, or the line is commented out, and use of Bluetooth is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.
V-269342
False
ALMA-09-029720
Verify that AlmaLinux OS 9 disables the ability to load the Bluetooth kernel module with the following command:
$ grep -r bluetooth /etc/modprobe.conf /etc/modprobe.d/*
/etc/modprobe.d/bluetooth.conf:install bluetooth /bin/false
/etc/modprobe.d/bluetooth.conf:blacklist bluetooth
If the command does not return any output, or the line is commented out, and use of Bluetooth is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.
M
5664