mediumnetworkunverified

Ensure wireless network adapters are disabled

wireless-adapters-disabled · RHEL ≥ 10 · 1 impl

Description

Wireless network adapters must be disabled unless the interface is documented and approved, to reduce the network attack surface.

Rationale

Unmanaged wireless interfaces provide an uncontrolled network path that can bypass perimeter defences.

Check → Remediate

Checkcommand

nmcli -t -f TYPE,STATE device status 2>/dev/null | grep -E "^(wifi|wwan):" | grep -vE ":(unavailable|unmanaged)\$" | head -1 | grep -q . && exit 1 || exit 0

expected_exit:: 0

Remediatemanual

note:: Disable/blacklist wireless adapters: nmcli radio all off; and blacklist the driver in /etc/modprobe.d/.

Framework references

STIG

V-281290 / RHEL-10-700870

NIST 800-53

AC-18CM-7

#wireless#network#attack-surface#stig