ansible-lockdown/RHEL9-CIS
3
0
Fork 1
mirror of https://github.com/ansible-lockdown/RHEL9-CIS.git synced 2025-12-24 22:23:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

added option for sysctl or kernel for disabling IPv6

Browse source 
Signed-off-by: George Nalen <georgen@mindpointgroup.com>
This commit is contained in:
George Nalen 2025-12-22 16:35:08 -05:00
parent 62989d258b
commit beb3bfdc94
No known key found for this signature in database
GPG key ID: CA43827BF7C4DEBA
2 changed files with 19 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
defaults/main.yml
View file

@ -802,6 +802,8 @@ rhel9cis_tftp_client: false
## Control 3.1.1 - Ensure IPv6 status is identified
# This variable governs whether ipv6 is enabled or disabled.
rhel9cis_ipv6_required: true
# rhel9cis_ipv6_disable defines the method of disabling IPv6, sysctl vs kernel
rhel9cis_ipv6_disable: "sysctl"
## Control 3.1.2 - Ensure wireless interfaces are disabled
# if wireless adapter found allow network manager to be installed