The Red Hat Enterprise Linux operating system must be configured so that the Datagram Congestion Control Protocol (DCCP) kernel module is disabled unless required.

An XCCDF Rule

Description

<VulnDiscussion>Disabling DCCP protects the system against exploitation of any flaws in the protocol implementation.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID: SV-204450r942897_rule
Severity: Medium
References: CCI-001958
Updated: 8 months ago

Configure the operating system to disable the ability to use the DCCP kernel module.

Create a file under "/etc/modprobe.d" with the following command:

     # touch /etc/modprobe.d/dccp.conf
Add the following line to the created file:

     install dccp /bin/false

Ensure that the DCCP module is blacklisted: 

     # vi /etc/modprobe.d/blacklist.conf

Add or update the line:

     blacklist dccp

The Red Hat Enterprise Linux operating system must be configured so that the Datagram Congestion Control Protocol (DCCP) kernel module is disabled unless required.

Description

Remediation - Manual Procedure