mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2025-12-25 14:43:06 +00:00
21 lines
No EOL
576 B
Django/Jinja
21 lines
No EOL
576 B
Django/Jinja
## This file is managed by Ansible, YOUR CHANGED WILL BE LOST!
|
|
|
|
# IPv6 Network sysctl
|
|
{% if rhel9cis_ipv6_required %}
|
|
{% if rhel9cis_rule_3_2_1 %}
|
|
net.ipv6.conf.all.forwarding = 0
|
|
{% endif %}
|
|
{% if rhel9cis_rule_3_3_1 %}
|
|
net.ipv6.conf.all.accept_source_route = 0
|
|
net.ipv6.conf.default.accept_source_route = 0
|
|
{% endif %}
|
|
{% if rhel9cis_rule_3_3_2 %}
|
|
net.ipv6.conf.all.accept_redirects = 0
|
|
net.ipv6.conf.default.accept_redirects = 0
|
|
{% endif %}
|
|
{% if rhel9cis_rule_3_3_9 %}
|
|
# CIS 3.3.9
|
|
net.ipv6.conf.all.accept_ra = 0
|
|
net.ipv6.conf.default.accept_ra = 0
|
|
{% endif %}
|
|
{% endif %} |