Merge pull request #29 from hardening-io/ipv6acceptra

bugfix: add missing: ipv6 accept_ra = 0
This commit is contained in:
Christoph Hartmann 2015-05-30 06:15:47 -07:00
commit 549150fad3

View file

@ -167,6 +167,14 @@ describe 'NSA 2.5.3.2.5 Limit Network-Transmitted Configuration' do
its(:value) { should eq 0 } its(:value) { should eq 0 }
end end
context linux_kernel_parameter('net.ipv6.conf.all.accept_ra') do
its(:value) { should eq 0 }
end
context linux_kernel_parameter('net.ipv6.conf.default.accept_ra') do
its(:value) { should eq 0 }
end
context linux_kernel_parameter('net.ipv6.conf.default.autoconf') do context linux_kernel_parameter('net.ipv6.conf.default.autoconf') do
its(:value) { should eq 0 } its(:value) { should eq 0 }
end end