OL 8 must not have the Controller Area Network (CAN) kernel module installed if not required for operational support.

An XCCDF Rule

Description

<VulnDiscussion>The CAN protocol is a robust vehicle bus standard designed to allow microcontrollers and devices to communicate with each other's applications without a host computer. Disabling CAN protects the system against exploitation of any flaws in its implementation.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID: SV-248830r991589_rule
Severity: Medium
References: CCI-000366
Updated: 17 days ago

Configure OL 8 to disable the ability to use the "can" kernel module. 
 
Create a file under "/etc/modprobe.d" with the following command: 
 
     $ sudo touch /etc/modprobe.d/can.conf 
 Add the following line to the created file: 
 
     install can /bin/false
 
Configure OL 8 to disable the ability to use the can kernel module. 
 
     $ sudo vi /etc/modprobe.d/blacklist.conf 
 
Add or update the line: 
 
     blacklist can

OL 8 must not have the Controller Area Network (CAN) kernel module installed if not required for operational support.

Description

Remediation - Manual Procedure