cyberstrikeus 3.7 Ensure wireless interfaces are disabled (Not Scored)
Profile Applicability
- Level 1 - Server
- Level 2 - Workstation
Description
Wireless networking is used when wired networks are unavailable. Ubuntu contains a wireless tool kit to allow system administrators to configure and use wireless networks.
Rationale
If wireless is not to be used, wireless devices can be disabled to reduce the potential attack surface.
Audit Procedure
Run the following command to determine wireless interfaces on the system:
iwconfig
Run the following command and verify wireless interfaces are active:
ip link show up
Expected Result
No wireless interfaces should be active (UP state).
Remediation
Run the following command to disable any wireless interfaces:
ip link set <interface> down
Disable any wireless interfaces in your network configuration.
Default Value
Wireless interfaces are enabled if hardware is present. Note: Many if not all laptop workstations and some desktop workstations will connect via wireless requiring these interfaces be enabled.
References
- CIS Controls: 15.4 - Configure Only Authorized Wireless Access On Client Machines
Profile
- Level 1 - Server
- Level 2 - Workstation