Detections
Analytics

1.358 RHEL-10-700860

Information

RHEL 10 must disable Bluetooth.

GROUP ID: V-281289RULE ID: SV-281289r1166819

This requirement applies to wireless peripheral technologies (e.g., wireless mice, keyboards, displays, etc.) used with RHEL 10 systems. Wireless peripherals (e.g., Wi-Fi/Bluetooth/IR keyboards, mice and pointing devices, and near field communications [NFC]) present a unique challenge by creating an open, unsecured port on a computer.

Wireless peripherals must meet DOD requirements for wireless data transmission and be approved for use by the authorizing official. Even though some wireless peripherals, such as mice and pointing devices, do not ordinarily carry information that must be protected, modification of communications with these wireless peripherals may be used to compromise the RHEL 10 operating system.

Satisfies: SRG-OS-000095-GPOS-00049, SRG-OS-000300-GPOS-00118

Solution

Configure RHEL 10 to disable the Bluetooth adapter when not in use.

Add the following lines to the file "/etc/modprobe.d/bluetooth.conf" (or create "bluetooth.conf" if it does not exist):

$ sudo vi /etc/modprobe.d/bluetooth.conf

install bluetooth /bin/falseblacklist bluetooth

Reboot the system for the settings to take effect.

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-18(1), 800-53|CM-7, 800-53|CM-7a., CAT|II, CCI|CCI-000381, CCI|CCI-001443, Rule-ID|SV-281289r1166819_rule, STIG-ID|RHEL-10-700860, Vuln-ID|V-281289

Plugin: Unix

Control ID: 17eacf1b1506ce4eab8d037764cc997309be5a7ec46b62a32c7fb93208896194