openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/source/developer-notes/V-38515.rst
Major Hayden 3120484527 V-3851{4,5,6,7}: Disabling certain network protocols 
This also includes a minor cleanup for V-38490 (disable usb-storage module).

Change-Id: Ie874cbf3c8fb6a69b7d0d674d728876a5d4d1fb7
2015-10-14 13:43:39 +00:00

317 B
Raw Blame History

The Stream Control Transmission Protocol (SCTP) must be disabled. This module isn't used by Ubuntu 14.04 or openstack-ansible by default.

To opt-out of this change, set the following variable to no:

disable_module['sctp']: no

NOTE: The module will be disabled on the next reboot.