Detections
Analytics

1.381 RHEL-10-701100

Information

RHEL 10 must be configured to disable the Controller Area Network (CAN) kernel module.

GROUP ID: V-281312RULE ID: SV-281312r1167086

Disabling CAN protects the system against exploitation of any flaws in its implementation.

Solution

Configure RHEL 10 to disable the ability to load the CAN kernel module.

Create a drop-in if it does not already exist:

$ sudo vi /etc/modprobe.d/can.conf

Add the following lines to the file:

install can /bin/falseblacklist can

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-281312r1167086_rule, STIG-ID|RHEL-10-701100, Vuln-ID|V-281312

Plugin: Unix

Control ID: 6e06c70fc004dfe0c045a0ca86ebacd647133f602082d46390db5d2c0668d2ed