Saltstack Official Linux Formula
Du kan inte välja fler än 25 ämnen Ämnen måste starta med en bokstav eller siffra, kan innehålla bindestreck ('-') och vara max 35 tecken långa.

38 lines
817B

  1. # 3.5.4 Ensure TIPC is disabled
  2. #
  3. # Description
  4. # ===========
  5. # The Transparent Inter-Process Communication (TIPC) protocol is designed
  6. # to provide communication between cluster nodes.
  7. #
  8. # Rationale
  9. # =========
  10. # If the protocol is not being used, it is recommended that kernel module
  11. # not be loaded, disabling the service to reduce the potential attack surface.
  12. #
  13. # Audit
  14. # =====
  15. # Run the following commands and verify the output is as indicated:
  16. #
  17. # # modprobe -n -v tipc
  18. # install /bin/true
  19. # # lsmod | grep tipc
  20. # <No output>
  21. #
  22. # Remediation
  23. # ===========
  24. #
  25. # Edit or create the file /etc/modprobe.d/CIS.conf and add the following line:
  26. #
  27. # install tipc /bin/true
  28. #
  29. parameters:
  30. linux:
  31. system:
  32. kernel:
  33. module:
  34. tipc:
  35. install:
  36. command: /bin/true