mediumkernelverified ✓rollback-safe
Disable DCCP kernel module
kmod-disable-dccp · RHEL ≥ 8 · 1 impl
Description
The Datagram Congestion Control Protocol (DCCP) kernel module should be disabled if not required.
Rationale
DCCP is a transport protocol that is rarely used on most systems. Disabling unused protocols reduces the attack surface and potential for exploitation of protocol vulnerabilities.
Check → Remediate
Checkkernel_module_state
- name:
- dccp
- state:
- disabled
Remediatekernel_module_disable
- name:
- dccp
Framework references
CIS
rhel9 3.2.1rhel10 3.2.3rhel8 3.2.3
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#kernel-module#dccp#network#attack-surface#stig