STIGQter STIGQter: STIG Summary: Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

Ubuntu 24.04 LTS must disable all wireless network adapters.

DISA Rule

SV-270755r1066754_rule

Vulnerability Number

V-270755

Group Title

SRG-OS-000481-GPOS-00481

Rule Version

UBTU-24-600230

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

List all the wireless interfaces with the following command:

$ ls -L -d /sys/class/net/*/wireless | xargs dirname | xargs basename

For each interface, configure the system to disable wireless network interfaces with the following command:

$ sudo ifdown <interface name>

For each interface listed, find their respective module with the following command:

$ basename $(readlink -f /sys/class/net/<interface name>/device/driver)

where <interface name> must be substituted by the actual interface name.

Create a file in the "/etc/modprobe.d" directory and for each module, add the following line:

install <module name> /bin/true

For each module from the system, execute the following command to remove it:

$ sudo modprobe -r <module name>

Check Contents

Note: This requirement is not applicable for systems that do not have physical wireless network radios.

Verify there are no wireless interfaces configured on the system with the following command:

$ ls -L -d /sys/class/net/*/wireless | xargs dirname | xargs basename

If a wireless interface is configured and has not been documented and approved by the information system security officer (ISSO), this is a finding.

Vulnerability Number

V-270755

Documentable

False

Rule Version

UBTU-24-600230

Severity Override Guidance

Note: This requirement is not applicable for systems that do not have physical wireless network radios.

Verify there are no wireless interfaces configured on the system with the following command:

$ ls -L -d /sys/class/net/*/wireless | xargs dirname | xargs basename

If a wireless interface is configured and has not been documented and approved by the information system security officer (ISSO), this is a finding.

Check Content Reference

M

Target Key

5673