Detections
Analytics

1.237 ALMA-09-029830

Information

AlmaLinux OS 9 must disable the Controller Area Network (CAN) kernel module.

GROUP ID: V-269343
RULE ID: SV-269343r1050225

The CAN protocol is a robust vehicle bus standard designed to allow microcontrollers and devices to communicate with each other's applications without a host computer.

Disabling CAN protects the system against exploitation of any flaws in its implementation.

Solution

To configure the system to prevent the can kernel module from being loaded, run the following command:

$ cat << EOF | tee /etc/modprobe.d/can.conf

install can /bin/false
blacklist can
EOF

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CCI|CCI-000381, Rule-ID|SV-269343r1050225_rule, STIG-ID|ALMA-09-029830, Vuln-ID|V-269343

Plugin: Unix

Control ID: eb1d0a3cbae89e5ff061dccc20ba80e013540331f9d72d86180ed24e33a71fb8