2022-07-29 18:33:00 +01:00
|
|
|
## This file is managed by Ansible, YOUR CHANGES WILL BE LOST!
|
2022-04-04 15:14:13 +01:00
|
|
|
|
|
|
|
|
# IPv6 Network sysctl
|
|
|
|
|
{% if rhel9cis_ipv6_required %}
|
|
|
|
|
{% if rhel9cis_rule_3_3_1 %}
|
2024-07-24 14:05:57 +01:00
|
|
|
# CIS 3.3.1
|
|
|
|
|
net.ipv6.conf.all.forwarding = 0
|
2022-04-04 15:14:13 +01:00
|
|
|
{% endif %}
|
2024-07-24 14:05:57 +01:00
|
|
|
{% if rhel9cis_rule_3_3_5 %}
|
|
|
|
|
# CIS 3.3.5
|
2022-04-04 15:14:13 +01:00
|
|
|
net.ipv6.conf.all.accept_redirects = 0
|
|
|
|
|
net.ipv6.conf.default.accept_redirects = 0
|
|
|
|
|
{% endif %}
|
2024-07-24 14:05:57 +01:00
|
|
|
{% if rhel9cis_rule_3_3_8 %}
|
|
|
|
|
# CIS 3.3.8
|
|
|
|
|
net.ipv6.conf.all.accept_source_route = 0
|
|
|
|
|
net.ipv6.conf.default.accept_source_route = 0
|
|
|
|
|
{% endif %}
|
|
|
|
|
{% if rhel9cis_rule_3_3_11 %}
|
|
|
|
|
# CIS 3.3.11
|
2022-04-04 15:14:13 +01:00
|
|
|
net.ipv6.conf.all.accept_ra = 0
|
|
|
|
|
net.ipv6.conf.default.accept_ra = 0
|
|
|
|
|
{% endif %}
|
2023-08-08 19:02:11 +01:00
|
|
|
{% endif %}
|