openstack/ansible-hardening
Code Issues Proposed changes
75c06173c7
ansible-hardening/doc/metadata/rhel6/V-38514.rst
Major Hayden 3c19f00a7f [Docs] Metadata cleanup 
This patch adds the right tags to each piece of metadata and corrects
small errors found in the deployer notes.

Closes-bug: 1595669
Change-Id: Ic04aaad85ebf111be5a0bdb01a350442fdea1433
2016-09-12 14:27:49 -05:00

483 B
Raw Blame History

---id: V-38514 status: implemented tag: kernel ---

The Datagram Congestion Control Protocol (DCCP) must be disabled if it's not needed. Although this protocol is occasionally used in some OpenStack environments for quality of service functions, it is not in the default implementation.

To opt-out of this change, simply change the following variable to no:

security_disable_module_dccp: no

NOTE: The module will be disabled on the next reboot.