mirror of
https://github.com/dev-sec/linux-baseline
synced 2024-11-26 13:00:21 +00:00
Merge pull request #29 from hardening-io/ipv6acceptra
bugfix: add missing: ipv6 accept_ra = 0
This commit is contained in:
commit
549150fad3
1 changed files with 8 additions and 0 deletions
|
@ -167,6 +167,14 @@ describe 'NSA 2.5.3.2.5 Limit Network-Transmitted Configuration' do
|
||||||
its(:value) { should eq 0 }
|
its(:value) { should eq 0 }
|
||||||
end
|
end
|
||||||
|
|
||||||
|
context linux_kernel_parameter('net.ipv6.conf.all.accept_ra') do
|
||||||
|
its(:value) { should eq 0 }
|
||||||
|
end
|
||||||
|
|
||||||
|
context linux_kernel_parameter('net.ipv6.conf.default.accept_ra') do
|
||||||
|
its(:value) { should eq 0 }
|
||||||
|
end
|
||||||
|
|
||||||
context linux_kernel_parameter('net.ipv6.conf.default.autoconf') do
|
context linux_kernel_parameter('net.ipv6.conf.default.autoconf') do
|
||||||
its(:value) { should eq 0 }
|
its(:value) { should eq 0 }
|
||||||
end
|
end
|
||||||
|
|
Loading…
Reference in a new issue