FS#53039 - [linux] disable DCCP (set CONFIG_IP_DCCP=n)

Attached to Project: Arch Linux
Opened by Sabrina Dubroca (qsn) - Tuesday, 21 February 2017, 14:39 GMT
Last edited by Andreas Radke (AndyRTR) - Sunday, 27 February 2022, 10:46 GMT
Task Type Feature Request
Category Packages: Core
Status Closed
Assigned To Tobias Powalowski (tpowa)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 4
Private No

Details

DCCP support in the Linux kernel is not well maintained. Serious bugs and even security issues have been found recently.
This code is mostly unused, thus it would be better to disable it.
This task depends upon

Closed by  Andreas Radke (AndyRTR)
Sunday, 27 February 2022, 10:46 GMT
Reason for closing:  Fixed
Comment by mattia (nTia89) - Tuesday, 03 October 2017, 20:19 GMT
please, provide source links to this statement
Comment by Remi Gacogne (rgacogne) - Tuesday, 03 October 2017, 20:58 GMT
One such example of a serious security issue is CVE-2017-6074 [1]. Of course one isolated example of a security issue does not prove that the code is not well maintained, but Sabrina is a Linux Kernel Engineer at Red Hat, working on netdev, and as such has an informed opinion on the matter. Sabrina, a few months after your initial report, do you still believe that the DCCP code is not worth enabling in our kernels?


[1]: http://seclists.org/oss-sec/2017/q1/471
Comment by mattia (nTia89) - Wednesday, 04 October 2017, 16:17 GMT
(sorry but I don't know what DCCP is..)
disabling that feature what will Arch linux users lose (both common users and developers, for example)?
Comment by loqs (loqs) - Monday, 28 June 2021, 05:48 GMT
 FS#68257  was fixed by the disabling of the DCCP module ( CONFIG_IP_DCCP ) which was the fix requested in this issue.

Loading...