Detections
Analytics

1.239 ALMA-09-030050

Information

AlmaLinux OS 9 must disable the Stream Control Transmission Protocol (SCTP) kernel module.

GROUP ID: V-269345
RULE ID: SV-269345r1050227

The SCTP is a transport layer protocol, designed to support the idea of message-oriented communication, with several streams of messages within one connection.

Disabling SCTP protects the system against exploitation of any flaws in its implementation.

Solution

To configure the system to prevent the SCTP kernel module from being loaded, run the following command:

$ cat << EOF | tee /etc/modprobe.d/sctp.conf

install sctp /bin/false
blacklist sctp
EOF

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CCI|CCI-000381, Rule-ID|SV-269345r1050227_rule, STIG-ID|ALMA-09-030050, Vuln-ID|V-269345

Plugin: Unix

Control ID: a544ecf53ebe6dadd82503893d7f0307eaf5875726752e956d49f9f292bd9a8c