OL07-00-020101 - The Oracle Linux operating system must be configured so that the Datagram Congestion Control Protocol (DCCP) kernel module is disabled unless required - dccp /bin/true.

Information

Disabling DCCP protects the system against exploitation of any flaws in the protocol implementation.

Solution

Configure the operating system to disable the ability to use the DCCP kernel module.

Create a file under '/etc/modprobe.d' with the following command:

# touch /etc/modprobe.d/dccp.conf

Add the following line to the created file:

install dccp /bin/false

Ensure that the DCCP module is blacklisted:

# vi /etc/modprobe.d/blacklist.conf

Add or update the line:

blacklist dccp

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_7_V2R14_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-3, CAT|II, CCI|CCI-001958, Rule-ID|SV-221713r942865_rule, STIG-ID|OL07-00-020101, STIG-Legacy|SV-108269, STIG-Legacy|V-99165, Vuln-ID|V-221713

Plugin: Unix

Control ID: b1a753c8f16e5dbb6bff49780fff7ceb374f383cb346bfb30380a6a558c9e8d5