dccp: Disable auto-loading as mitigation against local exploits
authorBen Hutchings <ben@decadent.org.uk>
Thu, 16 Feb 2017 19:09:17 +0000 (19:09 +0000)
committerSalvatore Bonaccorso <carnil@debian.org>
Thu, 19 Nov 2020 07:19:18 +0000 (07:19 +0000)
commit9abd5f4b824d878a6d37fd055c4e9b6d366a180c
treed797152e2d0c0afbaaf954a36d9885f507de5860
parentcf0a43e35eb7030c367a97e30ed286f8b24dda65
dccp: Disable auto-loading as mitigation against local exploits

Forwarded: not-needed

We can mitigate the effect of vulnerabilities in obscure protocols by
preventing unprivileged users from loading the modules, so that they
are only exploitable on systems where the administrator has chosen to
load the protocol.

The 'dccp' protocol is not actively maintained or widely used.
Therefore disable auto-loading.

Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Gbp-Pq: Topic debian
Gbp-Pq: Name dccp-disable-auto-loading-as-mitigation-against-local-exploits.patch
net/dccp/ipv4.c
net/dccp/ipv6.c