Disable Kernel cfg80211 Module

An XCCDF Rule

Details
Profiles
Prose

Description

To configure the system to prevent the cfg80211 kernel module from being loaded, add the following line to the file /etc/modprobe.d/cfg80211.conf:

install cfg80211 /bin/true

Rationale

If Wireless functionality must be disabled, preventing the kernel from loading the kernel module provides an additional safeguard against its activation.

ID: xccdf_org.ssgproject.content_rule_kernel_module_cfg80211_disabled
Severity: Medium
References: AC-18(3) AC-18(4) AC-18(a) CM-6(a) CM-7(a) CM-7(b) MP-7

CCE-85932-2
Updated: about 1 year ago

---
apiVersion: machineconfiguration.openshift.io/v1
kind: MachineConfig
spec:
  config:
    ignition:      version: 3.1.0
    storage:
      files:
      - contents:
          source: data:,install%20cfg80211%20/bin/true%0Ablacklist%20cfg80211%0A
        mode: 0644
        path: /etc/modprobe.d/cfg80211.conf
        overwrite: true

Disable Kernel cfg80211 Module

Description

Rationale

Remediation - Kubernetes Patch