{"description": "The IEEE 1394 (FireWire) is a serial bus standard for\nhigh-speed real-time communication.\n\nTo configure the system to prevent the <code>firewire-core</code>\nkernel module from being loaded, add the following line to the file <code>/etc/modprobe.d/firewire-core.conf</code>:\n<pre>install firewire-core /bin/false</pre>\nThis entry will cause a non-zero return value during a <code>firewire-core</code> module installation\nand additionally convey the meaning of the entry to the user in form of an error message.\nIf you would like to omit a non-zero return value and an error message, you may want to add a different line instead\n(both <code>/bin/true</code> and <code>/bin/false</code> are allowed by OVAL and will be accepted by the scan):\n<pre>install firewire-core /bin/true</pre>", "rationale": "Disabling FireWire protects the system against exploitation of any\nflaws in its implementation.", "severity": "low", "references": {"nist": ["AC-18"], "srg": ["SRG-OS-000095-GPOS-00049"]}, "control_references": {}, "components": [], "identifiers": {}, "ocil_clause": "no line is returned", "ocil": "\nIf the system is configured to prevent the loading of the <code>firewire-core</code> kernel module,\nit will contain lines inside any file in <code>/etc/modprobe.d</code> or the deprecated<code> /etc/modprobe.conf</code>.\nThese lines instruct the module loading system to run another program (such as <code>/bin/false</code>) upon a module <code>install</code> event.\n\nRun the following command to search for such lines in all files in <code>/etc/modprobe.d</code> and the deprecated <code>/etc/modprobe.conf</code>:\n<pre>$ grep -r firewire-core /etc/modprobe.conf /etc/modprobe.d</pre>", "oval_external_content": null, "fixtext": "", "checktext": "", "vuldiscussion": "", "srg_requirement": " The kernel module firewire-core must be disabled in Ubuntu 22.04.", "warnings": [], "conflicts": [], "requires": [], "policy_specific_content": {"stig": {"srg_requirement": "Ubuntu 22.04 must be configured to disable the FireWire kernel module.", "fixtext": "To configure the system to prevent the firewire-core kernel module from being loaded, add the following lines to the file /etc/modprobe.d/firewire-core.conf (or create firewire-core.conf if it does not exist):\n\ninstall firewire-core /bin/false\nblacklist firewire-core", "checktext": "Verify that Ubuntu 22.04 disables the ability to load the firewire-core kernel module with the following command:\n\n$ grep -r firewire-core /etc/modprobe.conf /etc/modprobe.d/*\n\ninstall firewire-core /bin/false\nblacklist firewire-core\n\nIf the command does not return any output, or the lines are commented out, and use of firewire-core is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.", "vuldiscussion": "Disabling firewire protects the system against exploitation of any flaws in its implementation."}}, "platform": null, "platforms": [], "sce_metadata": {}, "inherited_platforms": ["system_with_kernel"], "cpe_platform_names": [], "inherited_cpe_platform_names": ["system_with_kernel"], "bash_conditional": null, "fixes": {}, "title": "Disable IEEE 1394 (FireWire) Support", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/system/network/network-uncommon/kernel_module_firewire-core_disabled/rule.yml", "template": {"name": "kernel_module_disabled", "vars": {"kernmodule": "firewire-core"}, "backends": {}}}