Disable Kernel iwlwifi Module

An XCCDF Rule

Details
Profiles
Prose

Description

To configure the system to prevent the iwlwifi kernel module from being loaded, add the following line to the file /etc/modprobe.d/iwlwifi.conf:

install iwlwifi /bin/true

Rationale

If Wireless functionality must be disabled, preventing the kernel from loading the kernel module provides an additional safeguard against its activation.

ID: xccdf_org.ssgproject.content_rule_kernel_module_iwlwifi_disabled
Severity: Medium
References: AC-18(3) AC-18(4) AC-18(a) CM-6(a) CM-7(a) CM-7(b) MP-7

CCE-85934-8
Updated: about 1 year ago

---
apiVersion: machineconfiguration.openshift.io/v1
kind: MachineConfig
spec:
  config:
    ignition:      version: 3.1.0
    storage:
      files:
      - contents:
          source: data:,install%20iwlwifi%20/bin/true%0Ablacklist%20iwlwifi%0A
        mode: 0644
        path: /etc/modprobe.d/iwlwifi.conf
        overwrite: true

Disable Kernel iwlwifi Module

Description

Rationale

Remediation - Kubernetes Patch