dccp: Disable auto-loading as mitigation against local exploits
authorBen Hutchings <ben@decadent.org.uk>
Thu, 16 Feb 2017 19:09:17 +0000 (19:09 +0000)
committerBen Hutchings <ben@decadent.org.uk>
Sat, 23 Dec 2017 00:39:51 +0000 (00:39 +0000)
commit6e67538a19a4de0bbb7816bee05531592e2d3b0c
treebfd30403b9f47d1f1ec8e8e0d69394ed3e9c54fa
parentc4fd5096e9cea4695f4fc62b77799138ebd9cd95
dccp: Disable auto-loading as mitigation against local exploits

We can mitigate the effect of vulnerabilities in obscure protocols by
preventing unprivileged users from loading the modules, so that they
are only exploitable on systems where the administrator has chosen to
load the protocol.

The 'dccp' protocol is not actively maintained or widely used.
Therefore disable auto-loading.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Gbp-Pq: Topic debian
Gbp-Pq: Name dccp-disable-auto-loading-as-mitigation-against-local-exploits.patch
net/dccp/ipv4.c
net/dccp/ipv6.c