Mirrors/linux-baseline
2
0
Fork 0
mirror of https://github.com/dev-sec/linux-baseline synced 2024-11-22 19:23:02 +00:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #29 from hardening-io/ipv6acceptra

Browse source 
bugfix: add missing: ipv6 accept_ra = 0
This commit is contained in:
Christoph Hartmann 2015-05-30 06:15:47 -07:00
commit 549150fad3
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
default/serverspec/sysctl_spec.rb
View file

@ -167,6 +167,14 @@ describe 'NSA 2.5.3.2.5 Limit Network-Transmitted Configuration' do
its(:value) { should eq 0 }
end
context linux_kernel_parameter('net.ipv6.conf.all.accept_ra') do
its(:value) { should eq 0 }
end
context linux_kernel_parameter('net.ipv6.conf.default.accept_ra') do
its(:value) { should eq 0 }
end
context linux_kernel_parameter('net.ipv6.conf.default.autoconf') do
its(:value) { should eq 0 }
end