STIGQter STIGQter: STIG Summary: Canonical Ubuntu 18.04 LTS Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The Ubuntu operating system must disable all wireless network adapters.

DISA Rule

SV-219346r610963_rule

Vulnerability Number

V-219346

Group Title

SRG-OS-000481-GPOS-000481

Rule Version

UBTU-18-010521

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the system to disable all wireless network interfaces with the following command:

# sudo ifdown [ADAPTER_NAME]

Check Contents

Verify that there are no wireless interfaces configured on the system.

Check that the system does not have active wireless interfaces with the following command:

Note: This requirement is Not Applicable for systems that do not have physical wireless network radios.

# ifconfig -a | more

eth0 Link encap:Ethernet HWaddr ff:ff:ff:ff:ff:ff
inet addr:192.168.2.100 Bcast:192.168.2.255 Mask:255.255.255.0
...

eth1 IEEE 802.11b ESSID:"tacnet"
Mode:Managed Frequency:2.412 GHz Access Point: 00:40:E7:22:45:CD
...

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
...

If a wireless interface is configured and has not been documented and approved by the Information System Security Officer (ISSO), this is a finding.

Vulnerability Number

V-219346

Documentable

False

Rule Version

UBTU-18-010521

Severity Override Guidance

Verify that there are no wireless interfaces configured on the system.

Check that the system does not have active wireless interfaces with the following command:

Note: This requirement is Not Applicable for systems that do not have physical wireless network radios.

# ifconfig -a | more

eth0 Link encap:Ethernet HWaddr ff:ff:ff:ff:ff:ff
inet addr:192.168.2.100 Bcast:192.168.2.255 Mask:255.255.255.0
...

eth1 IEEE 802.11b ESSID:"tacnet"
Mode:Managed Frequency:2.412 GHz Access Point: 00:40:E7:22:45:CD
...

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
...

If a wireless interface is configured and has not been documented and approved by the Information System Security Officer (ISSO), this is a finding.

Check Content Reference

M

Target Key

4055

Comments