Disable Kernel mac80211 Module

An XCCDF Rule

Details
Profiles
Prose

Description

To configure the system to prevent the mac80211 kernel module from being loaded, add the following line to the file /etc/modprobe.d/mac80211.conf:

install mac80211 /bin/true

Rationale

If Wireless functionality must be disabled, preventing the kernel from loading the kernel module provides an additional safeguard against its activation.

ID: xccdf_org.ssgproject.content_rule_kernel_module_mac80211_disabled
Severity: Medium
References: AC-18(3) AC-18(4) AC-18(a) CM-6(a) CM-7(a) CM-7(b) MP-7

CCE-85935-5
Updated: about 1 year ago

---
apiVersion: machineconfiguration.openshift.io/v1
kind: MachineConfig
spec:
  config:
    ignition:      version: 3.1.0
    storage:
      files:
      - contents:
          source: data:,install%20mac80211%20/bin/true%0Ablacklist%20mac80211%0A
        mode: 0644
        path: /etc/modprobe.d/mac80211.conf
        overwrite: true

Disable Kernel mac80211 Module

Description

Rationale

Remediation - Kubernetes Patch