AlmaLinux OS 9 wireless network adapters must be disabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-269441 | ALMA-09-043250 | SV-269441r1050324_rule | CCI-002418 | medium |
| Description | ||||
| This requirement applies to wireless peripheral technologies (e.g., wireless mice, keyboards, displays, etc.) used with AlmaLinux OS 9 systems. Wireless peripherals (e.g., Wi-Fi/Bluetooth/IR keyboards, mice and pointing devices, and near field communications [NFC]) present a unique challenge by creating an open, unsecured port on a computer. Wireless peripherals must meet DOD requirements for wireless data transmission and be approved for use by the authorizing official (AO). Even though some wireless peripherals, such as mice and pointing devices, do not ordinarily carry information that need to be protected, modification of communications with these wireless peripherals may be used to compromise the AlmaLinux OS 9 operating system. Satisfies: SRG-OS-000481-GPOS-00481, SRG-OS-000299-GPOS-00117, SRG-OS-000300-GPOS-00118 | ||||
| STIG | Date | |||
| CloudLinux AlmaLinux OS 9 Security Technical Implementation Guide | 2025-05-22 | |||
Details
Check Text (C-269441r1050324_chk)
Note: If the system does not have physical wireless network radios, this requirement is Not Applicable.
Verify there are no wireless interfaces configured on the system with the following commands:
$ nmcli radio all
WIFI-HW WIFI WWAN-HW WWAN
enabled enabled missing disabled
$ nmcli device status
DEVICE TYPE STATE CONNECTION
wlp2s0 wifi connected cafe
lo loopback connected (externally) lo
p2p-dev-wlp2s0 wifi-p2p disconnected --
enp3s0f2 ethernet unavailable --
If a wireless interface is configured and has not been documented and approved by the information system security officer (ISSO), this is a finding.
Fix Text (F-73373r1048700_fix)
Configure the system to disable all wireless network interfaces with the following command:
$ nmcli radio all off