Skip to content

Guide to the Secure Configuration of Red Hat Enterprise Linux 9

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Disable Kernel iwlwifi Module

    To configure the system to prevent the <code>iwlwifi</code> kernel module from being loaded, add the following line to the file <code>/etc/modprob...
    Rule Medium Severity
  • Disable Kernel mac80211 Module

    To configure the system to prevent the <code>mac80211</code> kernel module from being loaded, add the following line to the file <code>/etc/modpro...
    Rule Medium Severity
  • deny_execmem SELinux Boolean

    default - Default SELinux boolean setting.
    on - SELinux boolean is enabled.
    off - SELinux boolean is disabled.
    Value
  • Deactivate Wireless Network Interfaces

    Deactivating wireless network interfaces should prevent normal usage of the wireless capability. <br><br> Configure the system to disable all wire...
    Rule Medium Severity
  • Disable Unused Interfaces

    Network interfaces expand the attack surface of the system. Unused interfaces are not monitored or controlled, and should be disabled. <br><br> If...
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules