RHEL-06-000124 - The Datagram Congestion Control Protocol (DCCP) must be disabled unless required.

Information

Disabling DCCP protects the system against exploitation of any flaws in its implementation.

Solution

The Datagram Congestion Control Protocol (DCCP) is a relatively new transport layer protocol, designed to support streaming media and telephony. To configure the system to prevent the 'dccp' kernel module from being loaded, add the following line to a file in the directory '/etc/modprobe.d':

install dccp /bin/true

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_6_V2R2_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CAT|II, CCI|CCI-000382, Rule-ID|SV-217934r603264_rule, STIG-ID|RHEL-06-000124, STIG-Legacy|SV-50315, STIG-Legacy|V-38514, Vuln-ID|V-217934

Plugin: Unix

Control ID: 5c933e6b096136c3771ea5b302edb47bc92d0861ae4801a801c6ce8929323ff6