NixOS must protect wireless access to and from the system using encryption.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-268146 | ANIX-00-001250 | SV-268146r1039326_rule | High |
| Description |
| Allowing devices and users to connect to or from the system without first authenticating them allows untrusted access and can lead to a compromise or attack. Since wireless communications can be intercepted, it is necessary to use encryption to protect the confidentiality of information in transit. Wireless technologies include, for example, microwave, packet radio (UHF/VHF), 802.11x, and Bluetooth. Wireless networks use authentication protocols (e.g., EAP/TLS, PEAP), which provide credential protection and mutual authentication. This requirement applies to those operating systems that control wireless devices. Satisfies: SRG-OS-000299-GPOS-00117, SRG-OS-000481-GPOS-00481 |
| STIG | Date |
| Anduril NixOS Security Technical Implementation Guide | 2024-10-25 |
Details
| Check Text (C-72070r1039324_chk) |
| Verify NixOS disables wireless adapters by running the following command: $ grep -R networking.wireless /etc/nixos/ /etc/nixos/configuratino.nix:networking.wireless.enable = false; If " networking.wireless.enable", does not equal false, is missing, or is commented out, this is a finding. |
| Fix Text (F-71973r1039325_fix) |
| Configure /etc/nixos/configuration.nix to disable wireless interfaces by adding the following configuration settings: networking.wireless.enable = false; Rebuild the system with the following command: $ sudo nixos-rebuild switch |