[PATCH 3/8] Corrected naming of set_sysctl_ipv6_default_accept_redirects
Shawn Wells
shawn.d.wells at gmail.com
Sun Jul 7 05:35:32 UTC 2013
-------------- next part --------------
>From 0067d73bcc875dccb1256a2bb73d1083551b6cbd Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Sun, 7 Jul 2013 01:21:16 -0400
Subject: [PATCH 3/8] Corrected naming of set_sysctl_ipv6_default_accept_redirects
Updated naming of XCCDF rule "set_sysctl_ipv6_default_accept_redirects" to "set_sysctl_net_ipv6_default_accept_redirects"
---
RHEL6/input/profiles/common.xml | 2 +-
RHEL6/input/profiles/fisma-medium-rhel6-server.xml | 2 +-
RHEL6/input/profiles/nist-CL-IL-AL.xml | 2 +-
RHEL6/input/profiles/usgcb-rhel6-server.xml | 2 +-
RHEL6/input/system/network/ipv6.xml | 2 +-
5 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/RHEL6/input/profiles/common.xml b/RHEL6/input/profiles/common.xml
index 3dc9f95..b6bc61f 100644
--- a/RHEL6/input/profiles/common.xml
+++ b/RHEL6/input/profiles/common.xml
@@ -90,7 +90,7 @@
<select idref="set_sysctl_net_ipv4_conf_all_rp_filter" selected="true"/>
<select idref="set_sysctl_net_ipv4_conf_default_rp_filter" selected="true"/>
<select idref="disable_ipv6_module_loading" selected="true"/>
-<select idref="set_sysctl_ipv6_default_accept_redirects" selected="true"/>
+<select idref="set_sysctl_net_ipv6_default_accept_redirects" selected="true"/>
<select idref="enable_ip6tables" selected="true"/>
<select idref="enable_iptables" selected="true"/>
<select idref="set_iptables_default_rule" selected="true"/>
diff --git a/RHEL6/input/profiles/fisma-medium-rhel6-server.xml b/RHEL6/input/profiles/fisma-medium-rhel6-server.xml
index deb597b..309ad08 100644
--- a/RHEL6/input/profiles/fisma-medium-rhel6-server.xml
+++ b/RHEL6/input/profiles/fisma-medium-rhel6-server.xml
@@ -270,7 +270,7 @@
<select idref="disable_ipv6_module_loading" selected="true" />
<select idref="network_ipv6_disable_rpc" selected="true" />
<select idref="set_sysctl_net_ipv6_conf_default_accept_ra" selected="true" />
-<select idref="set_sysctl_ipv6_default_accept_redirects" selected="true" />
+<select idref="set_sysctl_net_ipv6_default_accept_redirects" selected="true" />
<!-- IA-2(1) -->
<select idref="bootloader_password" selected="true" />
diff --git a/RHEL6/input/profiles/nist-CL-IL-AL.xml b/RHEL6/input/profiles/nist-CL-IL-AL.xml
index 66b4c57..96405c1 100644
--- a/RHEL6/input/profiles/nist-CL-IL-AL.xml
+++ b/RHEL6/input/profiles/nist-CL-IL-AL.xml
@@ -302,7 +302,7 @@ assurance."</description>
<select idref="disable_ipv6_module_loading" selected="true" \>
<select idref="network_ipv6_disable_rpc" selected="true" \>
<select idref="set_sysctl_net_ipv6_conf_default_accept_ra" selected="true" \>
-<select idref="set_sysctl_ipv6_default_accept_redirects" selected="true" \>
+<select idref="set_sysctl_net_ipv6_default_accept_redirects" selected="true" \>
<select idref="network_disable_unused_interfaces" selected="true" \>
<select idref="network_disable_zeroconf" selected="true" \>
<select idref="network_sniffer_disabled" selected="true" \>
diff --git a/RHEL6/input/profiles/usgcb-rhel6-server.xml b/RHEL6/input/profiles/usgcb-rhel6-server.xml
index a03855c..b849c3f 100644
--- a/RHEL6/input/profiles/usgcb-rhel6-server.xml
+++ b/RHEL6/input/profiles/usgcb-rhel6-server.xml
@@ -151,7 +151,7 @@
<select idref="network_ipv6_disable_rpc" selected="true" />
<refine-value idref="sysctl_net_ipv6_conf_default_accept_ra_value" selector="disabled" />
<select idref="set_sysctl_net_ipv6_conf_default_accept_ra" selected="true" />
-<select idref="set_sysctl_ipv6_default_accept_redirects" selected="true" />
+<select idref="set_sysctl_net_ipv6_default_accept_redirects" selected="true" />
<select idref="enable_ip6tables" selected="true" />
<select idref="enable_iptables" selected="true" />
<select idref="set_iptables_default_rule" selected="true" />
diff --git a/RHEL6/input/system/network/ipv6.xml b/RHEL6/input/system/network/ipv6.xml
index 220449e..7a38f40 100644
--- a/RHEL6/input/system/network/ipv6.xml
+++ b/RHEL6/input/system/network/ipv6.xml
@@ -130,7 +130,7 @@ An illicit router advertisement message could result in a man-in-the-middle atta
<ref nist="CM-7" />
</Rule>
-<Rule id="set_sysctl_ipv6_default_accept_redirects" severity="medium">
+<Rule id="set_sysctl_net_ipv6_default_accept_redirects" severity="medium">
<title>Disable Accepting IPv6 Redirects</title>
<description>
<sysctl-desc-macro sysctl="net.ipv6.conf.default.accept_redirects" value="0" />
--
1.7.1
More information about the scap-security-guide
mailing list