Merge ~cascardo/ubuntu/+source/kmod:dccp into ubuntu/+source/kmod:ubuntu/devel

[Thadeu Lima de Souza Cascardo]

DCCP has had many vulnerabilities reported and is not well maintained upstream. It seems to not be used by packages in the archive. Doing a quick scan on codesearch.debian.net, DCCP appears mostly in monitoring tools and languages headers.

Sysadmins can still modify the modprobe file or manually load the necessary modules.

Running a program that tries to use a DCCP socket, it fails to create such a socket when this fix is applied. Programs that could have been used to DoS the system will fail in such situations.

Unmerged commits

56896ed... by Thadeu Lima de Souza Cascardo on 2020-11-06

modprobe.d: blacklist dccp

DCCP has had many vulnerabilities reported and is not well maintained
upstream. It seems to not be used by packages in the archive. Doing a
quick scan on codesearch.debian.net, DCCP appears mostly in monitoring
tools and languages headers.

Sysadmins can still modify the modprobe file or manually load the necessary
modules.

Signed-off-by: Thadeu Lima de Souza Cascardo <email address hidden>

90b4ce3... by Steve Langasek on 2020-05-20

27+20200310-2ubuntu1 (patches unapplied)

Imported using git-ubuntu import.

diff --git a/debian/modprobe.d/blacklist-rare-network.conf b/debian/modprobe.d/blacklist-rare-network.conf
index 6c30188..302e309 100644
--- a/debian/modprobe.d/blacklist-rare-network.conf
+++ b/debian/modprobe.d/blacklist-rare-network.conf
@@ -20,3 +20,9 @@ alias net-pf-19 off
 alias net-pf-21 off
 # af_802154
 alias net-pf-36 off
+
+# dccp
+alias net-pf-2-proto-0-type-6 off
+alias net-pf-2-proto-33-type-6 off
+alias net-pf-10-proto-0-type-6 off
+alias net-pf-10-proto-33-type-6 off