Detections
Analytics

1.295 OL08-00-040023

Information

OL 8 must not have the stream control transmission protocol (SCTP) kernel module installed if not required for operational support.

GROUP ID: V-248831
RULE ID: SV-248831r991589

The SCTP is a transport layer protocol, designed to support the idea of message-oriented communication, with several streams of messages within one connection. Disabling SCTP protects the system against exploitation of any flaws in its implementation.

Solution

Configure OL 8 to disable the ability to use the "sctp" kernel module.

Create a file under "/etc/modprobe.d" with the following command:

$ sudo touch /etc/modprobe.d/sctp.conf

Add the following line to the created file:

install sctp /bin/false

Configure OL 8 to disable the ability to use the sctp kernel module.

$ sudo vi /etc/modprobe.d/blacklist.conf

Add or update the line:

blacklist sctp

See Also

https://workbench.cisecurity.org/benchmarks/23791

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-248831r991589_rule, STIG-ID|OL08-00-040023, Vuln-ID|V-248831

Plugin: Unix

Control ID: ca1e1e7e5fc2e119ea551a61f6965bddeececd25b30de27c92c03ac3091bfc4a