From fee2d2e7572eb5d1133e57f9a62c8303f22711ed Mon Sep 17 00:00:00 2001
From: Davide Gardenal <davide.gardenal@huawei.com>
Date: Fri, 18 Feb 2022 17:15:09 +0100
Subject: [PATCH] oniro-modprobe: Disable sctp protocol module to harden the
 system

Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
---
 .../oniro-modprobe/oniro-modprobe/oniro-kernel-mod.conf        | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/meta-oniro-core/recipes-core/oniro-modprobe/oniro-modprobe/oniro-kernel-mod.conf b/meta-oniro-core/recipes-core/oniro-modprobe/oniro-modprobe/oniro-kernel-mod.conf
index 552424be..13fc04ef 100644
--- a/meta-oniro-core/recipes-core/oniro-modprobe/oniro-modprobe/oniro-kernel-mod.conf
+++ b/meta-oniro-core/recipes-core/oniro-modprobe/oniro-modprobe/oniro-kernel-mod.conf
@@ -7,3 +7,6 @@
 
 # Disable uncommon protocol: dccp (system hardening)
 install dccp /bin/true
+
+# Disable uncommon protocol: sctp (system hardening)
+install sctp /bin/true
-- 
GitLab