Information
This requirement applies to wireless peripheral technologies (e.g., wireless mice, keyboards, displays, etc.) used with OL 9 systems. Wireless peripherals (e.g., Wi-Fi/Bluetooth/IR keyboards, mice and pointing devices, and near field communications [NFC]) present a unique challenge by creating an open, unsecured port on a computer. Wireless peripherals must meet DOD requirements for wireless data transmission and be approved for use by the authorizing official (AO). Even though some wireless peripherals, such as mice and pointing devices, do not ordinarily carry information that need to be protected, modification of communications with these wireless peripherals may be used to compromise the OL 9 operating system.
Satisfies: SRG-OS-000299-GPOS-00117, SRG-OS-000300-GPOS-00118, SRG-OS-000424-GPOS-00188, SRG-OS-000481-GPOS-00481
Solution
Configure the system to disable all wireless network interfaces with the following command:
$ sudo nmcli radio all off
Item Details
Category: ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|AC-18(1), 800-53|SC-8, 800-53|SC-8(1), CAT|II, CCI|CCI-001443, CCI|CCI-001444, CCI|CCI-002418, CCI|CCI-002421, Rule-ID|SV-271859r1092289_rule, STIG-ID|OL09-00-006001, Vuln-ID|V-271859
Control ID: 5667a405eff33458f0403137a2647babbea4036ae903711d3cee756e2be5042c