OL 8 must not have the stream control transmission protocol (SCTP) kernel module installed if not required for operational support.

An XCCDF Rule

Description

<VulnDiscussion>The SCTP is a transport layer protocol, designed to support the idea of message-oriented communication, with several streams of messages within one connection. Disabling SCTP protects the system against exploitation of any flaws in its implementation.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID: SV-248831r943077_rule
Severity: Medium
References: CCI-000366
Updated: 8 months ago

Configure OL 8 to disable the ability to use the "sctp" kernel module. 
 
Create a file under "/etc/modprobe.d" with the following command: 
 
     $ sudo touch /etc/modprobe.d/sctp.conf 
 Add the following line to the created file: 
 
     install sctp /bin/false
 
Configure OL 8 to disable the ability to use the sctp kernel module. 
 
     $ sudo vi /etc/modprobe.d/blacklist.conf 
 
Add or update the line: 
 
     blacklist sctp

OL 8 must not have the stream control transmission protocol (SCTP) kernel module installed if not required for operational support.

Description

Remediation - Manual Procedure