sr2/RHEL9-CIS
4
0
Fork 0
forked from ansible-lockdown/RHEL9-CIS
Code Activity

added missing test to 3.3.7

Browse source 
Signed-off-by: Mark Bolwell <mark.bollyuk@gmail.com>
This commit is contained in:
Mark Bolwell 2022-04-26 12:01:20 +01:00
parent 83f0fb30ec
commit 32f5817007
No known key found for this signature in database
GPG key ID: F734FDFC154B83FB
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
templates/etc/sysctl.d/60-netipv4_sysctl.conf.j2
View file

@ -40,6 +40,7 @@ net.ipv4.icmp_ignore_bogus_error_responses = 1
{% endif %}
{% if rhel9cis_rule_3_3_7 %}
# CIS 3.3.7
net.ipv4.conf.all.rp_filter = 1
net.ipv4.conf.default.rp_filter = 1
{% endif %}
{% if rhel9cis_rule_3_3_8 %}