Secure DECnet Protocol

Prevent the DECnet protocol from loading on your system by default. Potential attackers might exploit this protocol to compromise your system.

Avoid loading the DECnet Protocol module unless it is absolutely necessary. Binding this protocol to the network stack increases the attack surface of the host. Unprivileged local processes can cause the system to dynamically load a protocol handler by using the protocol to open a socket.

Procedure

1. Open the DECnet Protocol /etc/modprobe.d/modprobe.conf file in a text editor.
2. Ensure that the line install decnet /bin/false appears in this file.
3. Save the file and close it.