CCE-90907-7Platform: rhel7,centos7 | Date: (C)2017-06-29 (M)2022-10-10 |
Deactivate Wireless Network Interfaces
Deactivating wireless network interfaces should prevent
normal usage of the wireless capability.
First, identify the interfaces available with the command:
'$ ifconfig -a'
Additionally, the following command may be used to
determine whether wireless support is included for
Aparticular interface, though this may not always be a clear
indicator:
'$ iwconfig'
After identifying any wireless interfaces (which may have
names like 'wlan0', 'ath0', 'wifi0', 'em1' or
'eth0'), deactivate the interface with the command:
'$ sudo ifdown interface'
These changes will only last until the next reboot. To
disable the interface for future boots, remove the appropriate
interface file from '/etc/sysconfig/network-scripts':
'$ sudo rm /etc/sysconfig/network-scripts/ifcfg-interface'
Parameter:
Technical Mechanism:
Wireless networking allows attackers within physical proximity to
launch network-based attacks against systems, including those against local LAN
protocols which were not designed with security in mind.
Fix:
No Remediation Info
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:30563 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:31286 |