Detections
Analytics

OL08-00-040023 - OL 8 must not have the stream control transmission protocol (SCTP) kernel module installed if not required for operational support.

Information

The SCTP is a transport layer protocol, designed to support the idea of message-oriented communication, with several streams of messages within one connection. Disabling SCTP protects the system against exploitation of any flaws in its implementation.

Solution

Configure OL 8 to disable the ability to use the "sctp" kernel module.

Create a file under "/etc/modprobe.d" with the following command:

 $ sudo touch /etc/modprobe.d/sctp.conf

Add the following line to the created file:

 install sctp /bin/false

Configure OL 8 to disable the ability to use the sctp kernel module.

 $ sudo vi /etc/modprobe.d/blacklist.conf

Add or update the line:

 blacklist sctp

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_8_V2R8_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-248831r991589_rule, STIG-ID|OL08-00-040023, Vuln-ID|V-248831

Plugin: Unix

Control ID: a8c3fa01f50a1d12d395b3e060df48a4039a0f6cd90862ffbf3764ccb2f488d6