work around with CVE-2019-3874

kilsilent · Mar 28, 2019 · b684e96 · b684e96
1 parent b88d352
commit b684e96
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/roles/prepare/files/sctp.conf b/roles/prepare/files/sctp.conf
@@ -0,0 +1,2 @@
+# put sctp into blacklist
+install sctp /bin/true
diff --git a/roles/prepare/tasks/common.yml b/roles/prepare/tasks/common.yml
@@ -39,3 +39,6 @@
 
 - name: 设置系统 ulimits
   template: src=30-k8s-ulimits.conf.j2 dest=/etc/security/limits.d/30-k8s-ulimits.conf
+
+- name: 把SCTP列入内核模块黑名单
+  copy: src=sctp.conf dest=/etc/modprobe.d/sctp.conf
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		# put sctp into blacklist
		install sctp /bin/true