On Wed, Jan 15, 2014 at 1:27 PM, Rodney L. Mercer <rmercer(a)harris.com>wrote:
> 7) sysctl_ipv6_default_accept_redirects and
service_ip6tables_enabled
> fail when ipv6 has been disabled via modprobe.d entries
???
https://git.fedorahosted.org/cgit/scap-security-guide.git/commit/?id=6a27...
That's correct, sysctl_ipv6_default_accept_redirects is no longer showing a
false positive.
service_ip6tables_enabled is still a problem.