<Group id="network-uncommon">
<title>Uncommon Network Protocols</title>
<description>The system includes support for several network
protocols which are not commonly used. Although security vulnerabilities 
in kernel networking code are not frequently
discovered, the consequences can be dramatic. Ensuring uncommon
network protocols are disabled reduces the system's risk to attacks
targeted at its implementation of those protocols.</description>
<warning>
Although these protocols are not commonly used, avoid disruption
in your network environment by ensuring they are not needed
prior to disabling them.
</warning>

<Rule id="kernel_module_dccp_disabled" severity="medium">
<title>Disable DCCP Support</title>
<description>
The Datagram Congestion Control Protocol (DCCP) is a
relatively new transport layer protocol, designed to support
streaming media and telephony.
<module-disable-macro module="dccp" />
</description>
<ocil>
<module-disable-check-macro module="dccp" />
</ocil>
<rationale>
Disabling DCCP protects
the system against exploitation of any flaws in its implementation.
</rationale>
<ident cce="26448-1"  stig="RHEL-06-000124" />
<oval id="kernel_module_dccp_disabled" />
<ref nist="CM-7" disa="382"/>
<tested by="DS" on="20121024"/>
</Rule>

<Rule id="kernel_module_sctp_disabled" severity="medium">
<title>Disable SCTP Support</title>
<description>
The Stream Control Transmission Protocol (SCTP) is a
transport layer protocol, designed to support the idea of
message-oriented communication, with several streams of messages
within one connection.
<module-disable-macro module="sctp" />
</description>
<ocil>
<module-disable-check-macro module="sctp" />
</ocil>
<rationale>
Disabling SCTP protects
the system against exploitation of any flaws in its implementation.
</rationale>
<ident cce="26410-1"  stig="RHEL-06-000125" />
<oval id="kernel_module_sctp_disabled" />
<ref nist="CM-7" disa="382"/>
<tested by="DS" on="20121024"/>
</Rule>

<Rule id="kernel_module_rds_disabled">
<title>Disable RDS Support</title>
<description>
The Reliable Datagram Sockets (RDS) protocol is a transport
layer protocol designed to provide reliable high- bandwidth,
low-latency communications between nodes in a cluster.
<module-disable-macro module="rds" />
</description>
<ocil>
<module-disable-check-macro module="rds" />
</ocil>
<rationale>
Disabling RDS protects
the system against exploitation of any flaws in its implementation.
</rationale>
<ident cce="26239-4"  stig="RHEL-06-000126" />
<oval id="kernel_module_rds_disabled" />
<ref nist="CM-7" disa="382"/>
<tested by="DS" on="20121024"/>
</Rule>

<Rule id="kernel_module_tipc_disabled" severity="medium">
<title>Disable TIPC Support</title>
<description>
The Transparent Inter-Process Communication (TIPC) protocol
is designed to provide communications between nodes in a
cluster.
<module-disable-macro module="tipc" />
</description>
<ocil>
<module-disable-check-macro module="tipc" />
</ocil>
<rationale>
Disabling TIPC protects
the system against exploitation of any flaws in its implementation.
</rationale>
<ident cce="26696-5"  stig="RHEL-06-000127" />
<oval id="kernel_module_tipc_disabled" />
<ref nist="CM-7" disa="382"/>
<tested by="DS" on="20121024"/>
</Rule>

</Group>
