openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/source/developer-notes/V-38514.rst
Major Hayden 3120484527 V-3851{4,5,6,7}: Disabling certain network protocols 
This also includes a minor cleanup for V-38490 (disable usb-storage module).

Change-Id: Ie874cbf3c8fb6a69b7d0d674d728876a5d4d1fb7
2015-10-14 13:43:39 +00:00

394 B
Raw Blame History

The Datagram Congestion Control Protocol (DCCP) must be disabled if it's not needed. Neither Ubuntu 14.04 or openstack-ansible utilizes this kernel module and the Ansible tasks will disable it by default.

To opt-out of this change, simply change the following variable to no:

disable_module['dccp']: no

NOTE: The module will be disabled on the next reboot.