We’re rewarding the question askers & reputations are being recalculated! Read more.
2 edited tags
| link
    Tweeted twitter.com/StackSecurity/status/959609860160675840
1
source | link

How to disable conntrack protocol parsing in the linux kernel?

Security researcher Jacob Appelbaum suggested to avoid certain code paths in the linux kernel that are related to conntrack that do protocol parsing (such as fdp, sip, etc.) right in the kernel for hardening purposes.

How to disable conntrack protocol parsing in the linux kernel?