1.13 OL09-00-000040

Information

OL 9 must be configured to disable the Asynchronous Transfer Mode (ATM) kernel module.

GROUP ID: V-271443
RULE ID: SV-271443r1092463

Disabling ATM protects the system against exploitation of any flaws in its implementation.

Solution

Configure OL 9 to prevent the atm kernel module from being loaded.

Add the following line to the file /etc/modprobe.d/atm.conf (or create atm.conf if it does not exist):

install atm /bin/false
blacklist atm

See Also

https://workbench.cisecurity.org/benchmarks/27024