openstack
/
ansible-hardening
Code Issues Proposed changes

changed disable dccp conf for preventing kernel messages 

dccp_diag: Unknown symbol dccp_hashinfo (err 0)

https://access.redhat.com/solutions/2321691

$ cat /etc/modprobe.d/ansible-hardening-disable-dccp.conf
install dccp /bin/true
install dccp_diag /bin/true

Change-Id: I7441d71c52bdb4f215e1976d15e9282d9cd75139
Signed-off-by: Bernd Müller <mueller@b1-systems.de>
This commit is contained in:
Bernd Müller 2019-10-21 09:41:20 +02:00
parent 9cfc60f307
commit 3b95e7fc03
2 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
files/ansible-hardening-disable-dccp.conf Normal file
View File

@ -0,0 +1,2 @@
install dccp /bin/true
install dccp_diag /bin/true

5
tasks/rhel7stig/kernel.yml
View File

@ -98,10 +98,9 @@
- V-72067
- name: V-77821 - Datagram Congestion Control Protocol (DCCP) kernel module must be disabled
lineinfile:
copy:
src: ansible-hardening-disable-dccp.conf
dest: /etc/modprobe.d/ansible-hardening-disable-dccp.conf
line: install dccp /bin/true
create: yes
when:
- security_rhel7_disable_dccp | bool
tags: