The Red Hat Enterprise Linux operating system must be configured so that the Datagram Congestion Control Protocol (DCCP) kernel module is disabled unless required.

An XCCDF Rule

Description

Disabling DCCP protects the system against exploitation of any flaws in the protocol implementation.

ID: SV-204450r942897_rule
Version: RHEL-07-020101
Severity: Medium
References: CCI-001958
Updated: 5 days ago

Remediation Templates

Configure the operating system to disable the ability to use the DCCP kernel module.

Create a file under "/etc/modprobe.d" with the following command:

     # touch /etc/modprobe.d/dccp.conf
Add the following line to the created file:

     install dccp /bin/false

Ensure that the DCCP module is blacklisted: 

     # vi /etc/modprobe.d/blacklist.conf

Add or update the line:

     blacklist dccp