>From 0620e2436f830a57017414a21bffaf23ba2fbb2d Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Mon, 16 Jul 2012 02:13:41 -0400 Subject: [PATCH] Swapped bogus_error_messages for bogus_error_responses https://fedorahosted.org/pipermail/scap-security-guide/2012-July/001092.html --- ...l_net_ipv4_icmp_ignore_bogus_error_messages.xml | 39 -------------------- RHEL6/input/profiles/common.xml | 2 +- RHEL6/input/system/network/kernel.xml | 2 +- 3 files changed, 2 insertions(+), 41 deletions(-) delete mode 100644 RHEL6/input/checks/sysctl_net_ipv4_icmp_ignore_bogus_error_messages.xml diff --git a/RHEL6/input/checks/sysctl_net_ipv4_icmp_ignore_bogus_error_messages.xml b/RHEL6/input/checks/sysctl_net_ipv4_icmp_ignore_bogus_error_messages.xml deleted file mode 100644 index b15444b..0000000 --- a/RHEL6/input/checks/sysctl_net_ipv4_icmp_ignore_bogus_error_messages.xml +++ /dev/null @@ -1,39 +0,0 @@ - - - - Network Parameters for Hosts and Routers - - Red Hat Enterprise Linux 6 - - - Ignoring bogus ICMP responses to broadcasts - should be enabled or disabled as appropriate. - - - - - - - - - - - - - - - /etc - sysctl.conf - ^[\s]*net\.ipv4\.icmp_ignore_bogus_error_responses[\s]*=([\s]*) - 1 - - diff --git a/RHEL6/input/profiles/common.xml b/RHEL6/input/profiles/common.xml index 1b188da..b57ee15 100644 --- a/RHEL6/input/profiles/common.xml +++ b/RHEL6/input/profiles/common.xml @@ -59,7 +59,7 @@ + diff --git a/RHEL6/input/system/network/kernel.xml b/RHEL6/input/system/network/kernel.xml index 03be8ec..63bb1f5 100644 --- a/RHEL6/input/system/network/kernel.xml +++ b/RHEL6/input/system/network/kernel.xml @@ -293,7 +293,7 @@ addresses makes the system slightly more difficult to enumerate on the network. -Enable Kernel Parameter to Ignore Bogus ICMP Error Messages +Enable Kernel Parameter to Ignore Bogus ICMP Error Responses -- 1.7.1