lowkernelverified ✓rollback-safe
Disable firewire-core kernel module
kmod-disable-firewire-core · UBUNTU ≥ 22 · 1 impl
Description
The firewire-core module provides IEEE 1394 (FireWire) support. FireWire allows direct memory access from attached devices and is rarely needed on servers.
Rationale
FireWire's direct-memory-access capability is a physical attack vector. Where FireWire is not required, the module should not be loadable.
Check → Remediate
Checkkernel_module_state
- name:
- firewire-core
- state:
- blacklisted
Remediatekernel_module_disable
- name:
- firewire-core
Framework references
CIS
ubuntu22 1.1.1.11ubuntu24 1.1.1.9
NIST 800-53
CM-7
Live verification
ubuntu22:checkubuntu24:check
#kernel-module#attack-surface#cis