From 42410b4cd0a99833ff03a3b5eecfd1a24845bb40 Mon Sep 17 00:00:00 2001 From: Mark Bolwell Date: Wed, 30 Mar 2022 11:37:10 +0100 Subject: [PATCH] added ipv6 rules template Signed-off-by: Mark Bolwell --- templates/etc/60-disable_ipv6.conf.j2 | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 templates/etc/60-disable_ipv6.conf.j2 diff --git a/templates/etc/60-disable_ipv6.conf.j2 b/templates/etc/60-disable_ipv6.conf.j2 new file mode 100644 index 0000000..855d03d --- /dev/null +++ b/templates/etc/60-disable_ipv6.conf.j2 @@ -0,0 +1,4 @@ +{% if rhel9cis_rule_3_1_1 and rhel9cis_ipv6_required %} +net.ipv6.conf.all.disable_ipv6 = 1 +net.ipv6.conf.default.disable_ipv6 = 1 +{% endif %}