3.5.1 Ensure DCCP is disabled (Not Scored) [SecScan]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

======3.5.1 Ensure DCCP is disabled (Not Scored)======
=====Profile Applicability=====  
<code>
Level 1 - Server
Level 1 - Workstation 
</code>

=====Description=====
The Datagram Congestion Control Protocol (DCCP) is a transport layer protocol that supports streaming media and telephony. DCCP provides a way to gain access to congestion control, without having to do it at the application layer, but does not provide in-sequence delivery.

=====Rationale=====
If the protocol is not required, it is recommended that the drivers not be installed to reduce the potential attack surface.

=====Audit===== 
Run the following commands and verify the output is as indicated:
<Code:bash>
# modprobe -n -v dccp 
install /bin/true 
# lsmod | grep dccp 
<No output>
</Code>

=====Remediation===== 
Edit or create the file ''/etc/modprobe.d/CIS.conf'' and add the following line:
<Code:bash>
install dccp /bin/true
</Code>