mediumkernelverified ✓rollback-safe
Disable FireWire kernel module
kmod-disable-firewire · RHEL ≥ 8 · 1 impl
Description
The FireWire (IEEE 1394) kernel module should be disabled if FireWire devices are not used.
Rationale
FireWire provides direct memory access (DMA) which can be exploited by attackers with physical access to read or write system memory, potentially compromising the system.
Check → Remediate
Checkkernel_module_state
- name:
- firewire-core
- state:
- disabled
Remediatekernel_module_disable
- name:
- firewire-core
Framework references
CIS
rhel8 1.1.1.9rhel10 1.1.1.9
STIG
V-230499V-257806
NIST 800-53
CM-7AC-19
Live verification
rhel10:checkrhel8:checkrhel9:check
#kernel-module#firewire#dma#physical-security#stig