dccp: Disable auto-loading as mitigation against local exploits
authorBen Hutchings <ben@decadent.org.uk>
Thu, 16 Feb 2017 19:09:17 +0000 (19:09 +0000)
committerBen Hutchings <benh@debian.org>
Sun, 4 Aug 2024 20:10:58 +0000 (22:10 +0200)
commit8abfdf2841ae97a42845e27ea746933e34e5b8c3
tree52c93aedba12ca4159c4dd477eb95dba0a9fb112
parent84f9323773dd94d73689db5bbd472f09bf72d84a
dccp: Disable auto-loading as mitigation against local exploits

Forwarded: not-needed

We can mitigate the effect of vulnerabilities in obscure protocols by
preventing unprivileged users from loading the modules, so that they
are only exploitable on systems where the administrator has chosen to
load the protocol.

The 'dccp' protocol is not actively maintained or widely used.
Therefore disable auto-loading.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Gbp-Pq: Topic debian
Gbp-Pq: Name dccp-disable-auto-loading-as-mitigation-against-local-exploits.patch
net/dccp/ipv4.c
net/dccp/ipv6.c