Kernel modules

You can file an issue about it and ask that it be added.

---

Table of Contents

• Kernel modules
  • Prevent kernel modules being loaded

Kernel modules

Prevent kernel modules being loaded

Rationale

Although security vulnerabilities in kernel networking code are not frequently discovered, the consequences can be dramatic.

Solution

Disable DCCP support

Disabling DCCP protects the system against exploitation of any flaws in its implementation.

# Add to /etc/modprobe.d/modules.conf:
install dccp /bin/true

^{C2S/CIS: CCE-26828-4 (Medium)}

Disable SCTP support

Disabling SCTP protects the system against exploitation of any flaws in its implementation.

# Add to /etc/modprobe.d/modules.conf:
install sctp /bin/true

^{C2S/CIS: CCE-27106-4 (Medium)}

Comments

Useful resources