mediumkernelverified ✓rollback-safe
Disable TIPC kernel module
kmod-disable-tipc · RHEL ≥ 8 · 1 impl
Description
The Transparent Inter-Process Communication (TIPC) kernel module should be disabled if not required.
Rationale
TIPC is a cluster communication protocol rarely used on most systems. Disabling unused protocols reduces the attack surface and potential for exploitation of protocol vulnerabilities.
Check → Remediate
Checkkernel_module_state
- name:
- tipc
- state:
- disabled
Remediatekernel_module_disable
- name:
- tipc
Framework references
CIS
rhel9 3.2.2rhel10 3.2.4rhel8 3.2.6
STIG
V-257808V-230497V-281314 / RHEL-10-701120
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#kernel-module#tipc#network#attack-surface#stig