2 ms·
TIPC is one of the many modules that are suggested to be disabled in CIS and NIST hardening documentation unless you have an explicit requirement for it. [1] A
by LinuxBender 5y ago
TIPC is one of the many modules that are suggested to be disabled in CIS and NIST hardening documentation unless you have an explicit requirement for it. [1] And here [2] is a previous discussion from 2017 discussing disabling kernel modules. As imrejonk mentioned this is not loaded by default.
One can check the loaded modules with
lsmod
The module can be explicitly disabled with
# cat /etc/modprobe.d/tipc.conf
install tipc /bin/false
There are documents explaining the pros and cons to using /bin/false vs /bin/true for disabling modules.
[1] - https://downloads.cisecurity.org/#/ https://downloads.cisecurity.org/#/
[2] - https://news.ycombinator.com/item?id=13709591 https://news.ycombinator.com/item?id=13709591