Check: GEN007660
HP-UX 11.23 STIG:
GEN007660
(in version v1 r8)
Title
The Bluetooth protocol handler must be disabled or not installed. (Cat II impact)
Discussion
Bluetooth is a Personal Area Network (PAN) technology. Binding this protocol to the network stack increases the attack surface of the host. Unprivileged local processes may be able to cause the kernel to dynamically load a protocol handler by opening a socket using the protocol.
Check Content
If there is no Bluetooth protocol handler for the system, this is not applicable. The Bluetooth protocol handler is not currently available for the HP-UX 11i platform and is therefore not applicable.
Fix Text
Configure the system to prevent the dynamic loading of the Bluetooth protocol handler.
Additional Identifiers
Rule ID: SV-35251r1_rule
Vulnerability ID: V-22539
Group Title: GEN007660
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-001551 |
The organization defines approved authorizations for controlling the flow of information between interconnected systems. |
Controls
Number | Title |
---|---|
AC-4 |
Information Flow Enforcement |