dccp: Disable auto-loading as mitigation against local exploits
authorBen Hutchings <ben@decadent.org.uk>
Thu, 16 Feb 2017 19:09:17 +0000 (19:09 +0000)
committerBastian Blank <waldi@debian.org>
Sun, 16 Dec 2018 18:45:54 +0000 (18:45 +0000)
commit4eec4cf1dd0cab9ce80ff5eea99ab36e4c391dbe
treecb802b98e3115b0eff7e3e13b21f51a733325e3e
parent4f3b9433bc9a9b33515af2859b865128afad2dfb
dccp: Disable auto-loading as mitigation against local exploits

We can mitigate the effect of vulnerabilities in obscure protocols by
preventing unprivileged users from loading the modules, so that they
are only exploitable on systems where the administrator has chosen to
load the protocol.

The 'dccp' protocol is not actively maintained or widely used.
Therefore disable auto-loading.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Gbp-Pq: Topic debian
Gbp-Pq: Name dccp-disable-auto-loading-as-mitigation-against-local-exploits.patch
net/dccp/ipv4.c
net/dccp/ipv6.c