OL 8 must not have the stream control transmission protocol (SCTP) kernel module installed if not required for operational support.

An XCCDF Rule

Details
Profiles

Description

The SCTP is a transport layer protocol, designed to support the idea of message-oriented communication, with several streams of messages within one connection. Disabling SCTP protects the system against exploitation of any flaws in its implementation.

ID: SV-248831r991589_rule
Version: OL08-00-040023
Severity: Medium
References: CCI-000366
Updated: about 2 months ago

Remediation Templates

Configure OL 8 to disable the ability to use the "sctp" kernel module. 
 
Create a file under "/etc/modprobe.d" with the following command: 
 
     $ sudo touch /etc/modprobe.d/sctp.conf 
 Add the following line to the created file: 
 
     install sctp /bin/false
 
Configure OL 8 to disable the ability to use the sctp kernel module. 
 
     $ sudo vi /etc/modprobe.d/blacklist.conf 
 
Add or update the line: 
 
     blacklist sctp

OL 8 must not have the stream control transmission protocol (SCTP) kernel module installed if not required for operational support.

Description

Remediation Templates

A Manual Procedure