AlmaLinux OS 9 wireless network adapters must be disabled.

Severity	Group ID	Group Title	Version	Rule ID	Date	STIG Version
medium	V-269441	SRG-OS-000481-GPOS-00481	ALMA-09-043250	SV-269441r1050324_rule	2025-02-20	1

Description
This requirement applies to wireless peripheral technologies (e.g., wireless mice, keyboards, displays, etc.) used with AlmaLinux OS 9 systems. Wireless peripherals (e.g., Wi-Fi/Bluetooth/IR keyboards, mice and pointing devices, and near field communications [NFC]) present a unique challenge by creating an open, unsecured port on a computer. Wireless peripherals must meet DOD requirements for wireless data transmission and be approved for use by the authorizing official (AO). Even though some wireless peripherals, such as mice and pointing devices, do not ordinarily carry information that need to be protected, modification of communications with these wireless peripherals may be used to compromise the AlmaLinux OS 9 operating system. Satisfies: SRG-OS-000481-GPOS-00481, SRG-OS-000299-GPOS-00117, SRG-OS-000300-GPOS-00118

Description

This requirement applies to wireless peripheral technologies (e.g., wireless mice, keyboards, displays, etc.) used with AlmaLinux OS 9 systems. Wireless peripherals (e.g., Wi-Fi/Bluetooth/IR keyboards, mice and pointing devices, and near field communications [NFC]) present a unique challenge by creating an open, unsecured port on a computer. Wireless peripherals must meet DOD requirements for wireless data transmission and be approved for use by the authorizing official (AO). Even though some wireless peripherals, such as mice and pointing devices, do not ordinarily carry information that need to be protected, modification of communications with these wireless peripherals may be used to compromise the AlmaLinux OS 9 operating system. Satisfies: SRG-OS-000481-GPOS-00481, SRG-OS-000299-GPOS-00117, SRG-OS-000300-GPOS-00118

ℹ️ Check
Note: If the system does not have physical wireless network radios, this requirement is Not Applicable. Verify there are no wireless interfaces configured on the system with the following commands: $ nmcli radio all WIFI-HW WIFI WWAN-HW WWAN enabled enabled missing disabled $ nmcli device status DEVICE TYPE STATE CONNECTION wlp2s0 wifi connected cafe lo loopback connected (externally) lo p2p-dev-wlp2s0 wifi-p2p disconnected -- enp3s0f2 ethernet unavailable -- If a wireless interface is configured and has not been documented and approved by the information system security officer (ISSO), this is a finding.

ℹ️ Check

Note: If the system does not have physical wireless network radios, this requirement is Not Applicable. Verify there are no wireless interfaces configured on the system with the following commands: $ nmcli radio all WIFI-HW WIFI WWAN-HW WWAN enabled enabled missing disabled $ nmcli device status DEVICE TYPE STATE CONNECTION wlp2s0 wifi connected cafe lo loopback connected (externally) lo p2p-dev-wlp2s0 wifi-p2p disconnected -- enp3s0f2 ethernet unavailable -- If a wireless interface is configured and has not been documented and approved by the information system security officer (ISSO), this is a finding.

✔️ Fix
Configure the system to disable all wireless network interfaces with the following command: $ nmcli radio all off