mirror of
https://github.com/ansible-lockdown/RHEL9-CIS.git
synced 2025-12-24 22:23:06 +00:00
24 lines
615 B
Django/Jinja
24 lines
615 B
Django/Jinja
## This file is managed by Ansible, YOUR CHANGES WILL BE LOST!
|
|
|
|
# IPv6 Network sysctl
|
|
{% if rhel9cis_ipv6_required %}
|
|
{% if rhel9cis_rule_3_3_1 %}
|
|
# CIS 3.3.1
|
|
net.ipv6.conf.all.forwarding = 0
|
|
{% endif %}
|
|
{% if rhel9cis_rule_3_3_5 %}
|
|
# CIS 3.3.5
|
|
net.ipv6.conf.all.accept_redirects = 0
|
|
net.ipv6.conf.default.accept_redirects = 0
|
|
{% endif %}
|
|
{% if rhel9cis_rule_3_3_8 %}
|
|
# CIS 3.3.8
|
|
net.ipv6.conf.all.accept_source_route = 0
|
|
net.ipv6.conf.default.accept_source_route = 0
|
|
{% endif %}
|
|
{% if rhel9cis_rule_3_3_11 %}
|
|
# CIS 3.3.11
|
|
net.ipv6.conf.all.accept_ra = 0
|
|
net.ipv6.conf.default.accept_ra = 0
|
|
{% endif %}
|
|
{% endif %}
|