OL 8 must not have the Controller Area Network (CAN) kernel module installed if not required for operational support.

An XCCDF Rule

Details
Profiles

Description

The CAN protocol is a robust vehicle bus standard designed to allow microcontrollers and devices to communicate with each other's applications without a host computer. Disabling CAN protects the system against exploitation of any flaws in its implementation.

ID: SV-248830r991589_rule
Version: OL08-00-040022
Severity: Medium
References: CCI-000366
Updated: about 2 months ago

Remediation Templates

Configure OL 8 to disable the ability to use the "can" kernel module. 
 
Create a file under "/etc/modprobe.d" with the following command: 
 
     $ sudo touch /etc/modprobe.d/can.conf 
 Add the following line to the created file: 
 
     install can /bin/false
 
Configure OL 8 to disable the ability to use the can kernel module. 
 
     $ sudo vi /etc/modprobe.d/blacklist.conf 
 
Add or update the line: 
 
     blacklist can

OL 8 must not have the Controller Area Network (CAN) kernel module installed if not required for operational support.

Description

Remediation Templates

A Manual Procedure