dccp: Disable auto-loading as mitigation against local exploits
authorBen Hutchings <ben@decadent.org.uk>
Thu, 16 Feb 2017 19:09:17 +0000 (19:09 +0000)
committerSalvatore Bonaccorso <carnil@debian.org>
Fri, 31 May 2024 18:24:01 +0000 (20:24 +0200)
commit6a8c7e9f4361e99e25c1e2a225f165c1a8fe23c5
treebcbfcdba0bf46962dbc7a35d9c9c6cb8d4f08860
parent9614c1dee48a010d0bc6f3dd0d78ef3466977aea
dccp: Disable auto-loading as mitigation against local exploits

Forwarded: not-needed

We can mitigate the effect of vulnerabilities in obscure protocols by
preventing unprivileged users from loading the modules, so that they
are only exploitable on systems where the administrator has chosen to
load the protocol.

The 'dccp' protocol is not actively maintained or widely used.
Therefore disable auto-loading.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Gbp-Pq: Topic debian
Gbp-Pq: Name dccp-disable-auto-loading-as-mitigation-against-local-exploits.patch
net/dccp/ipv4.c
net/dccp/ipv6.c