GEN007540 - The Transparent Inter-Process Communication (TIPC) protocol must be disabled or not installed.

Information

The Transparent Inter-Process Communication (TIPC) protocol is a relatively new cluster communications protocol developed by Ericsson. Binding this protocol to the network stack increases the attack surface of the host. Unprivileged local processes may be able to cause the kernel to dynamically load a protocol handler by opening a socket using the protocol.

Satisfies: SRG-OS-000096, SRG-OS-000510

Solution

Remove the TIPC protocol handler package.
# pkgrm SUNWtipc

OR

Prevent the TIPC protocol handler from dynamic loading.
# echo 'exclude: tipc' >> /etc/system

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CAT|II, CCI|CCI-000382, Rule-ID|SV-227959r603266_rule, STIG-ID|GEN007540, STIG-Legacy|SV-26902, STIG-Legacy|V-22533, Vuln-ID|V-227959

Plugin: Unix

Control ID: 26a4528b2a8279baa11b2d5dfd3451d6476cfd7c7aaf52f16d4936e7c77c44ce