Page MenuHomeDevCentral

D931.id2376.diff
No OneTemporary

D931.id2376.diff

diff --git a/hotfixes/CVE-2017-6074.sls b/hotfixes/CVE-2017-6074.sls
new file mode 100644
--- /dev/null
+++ b/hotfixes/CVE-2017-6074.sls
@@ -0,0 +1,25 @@
+# -------------------------------------------------------------
+# Salt — Hotfixes to mitigate bugs and security issues
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# Created: 2017-02-27
+# License: Trivial work, not eligible to copyright
+# -------------------------------------------------------------
+
+# -------------------------------------------------------------
+# CVE-2017-6074
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+{% if grains['os_family'] == 'Debian' %}
+/etc/modprobe.d/blacklist-dccp.conf:
+ file.managed:
+ - source: salt://hotfixes/files/CVE-2017-6074-blacklist-dccp.conf
+ - mode: 644
+{% endif %}
+
+{% if grains['os_family'] == 'RedHat' %}
+/etc/modprobe.d/disable-dccp.conf:
+ file.managed:
+ - source: salt://hotfixes/files/CVE-2017-6074-disable-dccp.conf
+ - mode: 644
+{% endif %}
diff --git a/hotfixes/files/CVE-2017-6074-blacklist-dccp.conf b/hotfixes/files/CVE-2017-6074-blacklist-dccp.conf
new file mode 100644
--- /dev/null
+++ b/hotfixes/files/CVE-2017-6074-blacklist-dccp.conf
@@ -0,0 +1,7 @@
+alias net-pf-2-proto-0-type-6 off
+
+alias net-pf-2-proto-33-type-6 off
+
+alias net-pf-10-proto-0-type-6 off
+
+alias net-pf-10-proto-33-type-6 off
diff --git a/hotfixes/files/CVE-2017-6074-disable-dccp.conf b/hotfixes/files/CVE-2017-6074-disable-dccp.conf
new file mode 100644
--- /dev/null
+++ b/hotfixes/files/CVE-2017-6074-disable-dccp.conf
@@ -0,0 +1 @@
+install dccp /bin/true
diff --git a/hotfixes/init.sls b/hotfixes/init.sls
new file mode 100644
--- /dev/null
+++ b/hotfixes/init.sls
@@ -0,0 +1,10 @@
+# -------------------------------------------------------------
+# Salt — Hotfixes to mitigate bugs and security issues
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# Created: 2017-02-27
+# License: Trivial work, not eligible to copyright
+# -------------------------------------------------------------
+
+include:
+ - CVE-2017-6074

File Metadata

Mime Type
text/plain
Expires
Sat, Nov 16, 18:55 (20 h, 50 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
2247959
Default Alt Text
D931.id2376.diff (2 KB)

Event Timeline