From 8aeb4ddc3d41ffe33f779bbbd0b396e430bf9eb7 Mon Sep 17 00:00:00 2001
From: Davide Gardenal <davide.gardenal@huawei.com>
Date: Fri, 18 Feb 2022 17:13:55 +0100
Subject: [PATCH] oniro-modprobe: Disable dccp protocol kernel module to harden
 the system

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
---
 .../oniro-modprobe/oniro-modprobe/oniro-kernel-mod.conf        | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/meta-oniro-core/recipes-core/oniro-modprobe/oniro-modprobe/oniro-kernel-mod.conf b/meta-oniro-core/recipes-core/oniro-modprobe/oniro-modprobe/oniro-kernel-mod.conf
index b9b261ae..552424be 100644
--- a/meta-oniro-core/recipes-core/oniro-modprobe/oniro-modprobe/oniro-kernel-mod.conf
+++ b/meta-oniro-core/recipes-core/oniro-modprobe/oniro-modprobe/oniro-kernel-mod.conf
@@ -4,3 +4,6 @@
 #
 
 # This file contains modprobe config
+
+# Disable uncommon protocol: dccp (system hardening)
+install dccp /bin/true
-- 
GitLab