mediumkernelverified ✓rollback-safe
Disable Bluetooth kernel module
kmod-disable-bluetooth · RHEL ≥ 8 · 1 impl
Description
The Bluetooth kernel module should be disabled if Bluetooth functionality is not required.
Rationale
Bluetooth can be used by attackers as an attack vector for unauthorized access or data exfiltration. If not needed, the kernel module should be disabled to reduce the attack surface.
Check → Remediate
Checkkernel_module_state
- name:
- bluetooth
- state:
- disabled
Remediatekernel_module_disable
- name:
- bluetooth
Framework references
CIS
rhel9 3.1.3rhel10 3.1.3rhel8 3.1.3
STIG
V-230507V-258039V-281289 / RHEL-10-700860
NIST 800-53
AC-18CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#kernel-module#bluetooth#wireless#attack-surface#stig