3.5.4 Ensure TIPC is disabled (Not Scored)
Profile Applicability
Level 1 - Server Level 1 - Workstation
Description
The Transparent Inter-Process Communication (TIPC) protocol is designed to provide communication between cluster nodes.
Rationale
If the protocol is not being used, it is recommended that kernel module not be loaded, disabling the service to reduce the potential attack surface.
Audit
Run the following commands and verify the output is as indicated:
# modprobe -n -v tipc install /bin/true # lsmod | grep tipc <No output>
Remediation
Edit or create the file /etc/modprobe.d/CIS.conf
and add the following line:
install tipc /bin/true