OL09-00-000041 - OL 9 must be configured to disable the Controller Area Network (CAN) kernel module.

Information

Disabling CAN protects the system against exploitation of any flaws in its implementation.

Solution

Configure OL 9 to prevent the can kernel module from being loaded.

Add the following line to the file /etc/modprobe.d/can.conf (or create atm.conf if it does not exist):

install can /bin/false
blacklist can

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_9_V1R5_STIG.zip