dccp: Disable auto-loading as mitigation against local exploits
authorBen Hutchings <ben@decadent.org.uk>
Thu, 16 Feb 2017 19:09:17 +0000 (19:09 +0000)
committerSalvatore Bonaccorso <carnil@debian.org>
Wed, 24 Apr 2024 07:42:56 +0000 (09:42 +0200)
commitb74f4a0edc45ad2fb7f63dca7fabfacc70eceae8
tree6aaa1f1377e9562cee4718d3dd9485a2d6f22504
parent6ebcfba36585ac809f6a7a2466c0c6f01c9d2c9f
dccp: Disable auto-loading as mitigation against local exploits

Forwarded: not-needed

We can mitigate the effect of vulnerabilities in obscure protocols by
preventing unprivileged users from loading the modules, so that they
are only exploitable on systems where the administrator has chosen to
load the protocol.

The 'dccp' protocol is not actively maintained or widely used.
Therefore disable auto-loading.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Gbp-Pq: Topic debian
Gbp-Pq: Name dccp-disable-auto-loading-as-mitigation-against-local-exploits.patch
net/dccp/ipv4.c
net/dccp/ipv6.c