SALT8/the-practical-linux-hardening-guide
Watch
1
0
Fork
You've already forked the-practical-linux-hardening-guide
 0
mirror of https://github.com/trimstray/the-practical-linux-hardening-guide.git synced 2026-08-05 21:18:15 +02:00
Code Issues Projects Releases Packages Wiki Activity
Page: Kernel modules
Pages
Account and Access Auditd Backups Bootloader and Partitions Compilers Devices Entropy Home Kernel modules Maintaining Software Network stack Notifications OpenSSH PAM Module Permissions and Limits SELinux System stack
1 Kernel modules
trimstray edited this page 2019-02-27 15:32:47 +01:00
Table of contents

You can file an issue about it and ask that it be added.

Table of Contents

Kernel modules

Prevent kernel modules being loaded

Rationale

Although security vulnerabilities in kernel networking code are not frequently discovered, the consequences can be dramatic.

Solution

Disable DCCP support

Disabling DCCP protects the system against exploitation of any flaws in its implementation.

# Add to /etc/modprobe.d/modules.conf:
install dccp /bin/true

C2S/CIS: CCE-26828-4 (Medium)

Disable SCTP support

Disabling SCTP protects the system against exploitation of any flaws in its implementation.

# Add to /etc/modprobe.d/modules.conf:
install sctp /bin/true

C2S/CIS: CCE-27106-4 (Medium)

Comments

Useful resources

Basic information

Core Layer

Kernel Layer

Extended Layer

Logging & Auditing

System Services

Other Services

Containers

The Practical Linux Hardening Guide provides a high-level overview of the hardening GNU/Linux systems. It is not an official standard or handbook but it touches and use industry standards.