mediumkernelverified ✓rollback-safe
Disable RDS kernel module
kmod-disable-rds · RHEL ≥ 8 · 1 impl
Description
The Reliable Datagram Sockets (RDS) kernel module should be disabled if not required.
Rationale
RDS is a high-performance transport protocol rarely used on most systems. Disabling unused protocols reduces the attack surface and potential for exploitation of protocol vulnerabilities.
Check → Remediate
Checkkernel_module_state
- name:
- rds
- state:
- disabled
Remediatekernel_module_disable
- name:
- rds
Framework references
CIS
rhel9 3.2.3rhel10 3.2.5rhel8 3.2.4
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#kernel-module#rds#network#attack-surface#stig