Detections
Analytics

1.235 ALMA-09-029610

Information

AlmaLinux OS 9 must disable the Asynchronous Transfer Mode (ATM) kernel module.

GROUP ID: V-269341
RULE ID: SV-269341r1050223

The ATM is a transport layer protocol designed for digital transmission of multiple types of traffic, including telephony (voice), data, and video signals, in one network without the use of separate overlay networks.

Disabling ATM protects the system against exploitation of any flaws in its implementation.

Solution

To configure the system to prevent the atm kernel module from being loaded, run the following command:

$ cat << EOF | tee /etc/modprobe.d/atm.conf

install atm /bin/false
blacklist atm
EOF

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CCI|CCI-000381, Rule-ID|SV-269341r1050223_rule, STIG-ID|ALMA-09-029610, Vuln-ID|V-269341

Plugin: Unix

Control ID: 563b0b02770c0e999328c28190fd62e30c86c28117471f3d8fb0df15e8b42979