[PATCH 3/8] Corrected naming of set_sysctl_ipv6_default_accept_redirects

Shawn Wells shawn.d.wells at gmail.com
Sun Jul 7 05:35:32 UTC 2013


-------------- next part --------------
>From 0067d73bcc875dccb1256a2bb73d1083551b6cbd Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Sun, 7 Jul 2013 01:21:16 -0400
Subject: [PATCH 3/8] Corrected naming of set_sysctl_ipv6_default_accept_redirects
  Updated naming of XCCDF rule "set_sysctl_ipv6_default_accept_redirects" to "set_sysctl_net_ipv6_default_accept_redirects"

---
 RHEL6/input/profiles/common.xml                    |    2 +-
 RHEL6/input/profiles/fisma-medium-rhel6-server.xml |    2 +-
 RHEL6/input/profiles/nist-CL-IL-AL.xml             |    2 +-
 RHEL6/input/profiles/usgcb-rhel6-server.xml        |    2 +-
 RHEL6/input/system/network/ipv6.xml                |    2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/RHEL6/input/profiles/common.xml b/RHEL6/input/profiles/common.xml
index 3dc9f95..b6bc61f 100644
--- a/RHEL6/input/profiles/common.xml
+++ b/RHEL6/input/profiles/common.xml
@@ -90,7 +90,7 @@
 <select idref="set_sysctl_net_ipv4_conf_all_rp_filter" selected="true"/>
 <select idref="set_sysctl_net_ipv4_conf_default_rp_filter" selected="true"/>
 <select idref="disable_ipv6_module_loading" selected="true"/>
-<select idref="set_sysctl_ipv6_default_accept_redirects" selected="true"/>
+<select idref="set_sysctl_net_ipv6_default_accept_redirects" selected="true"/>
 <select idref="enable_ip6tables" selected="true"/>
 <select idref="enable_iptables" selected="true"/>
 <select idref="set_iptables_default_rule" selected="true"/>
diff --git a/RHEL6/input/profiles/fisma-medium-rhel6-server.xml b/RHEL6/input/profiles/fisma-medium-rhel6-server.xml
index deb597b..309ad08 100644
--- a/RHEL6/input/profiles/fisma-medium-rhel6-server.xml
+++ b/RHEL6/input/profiles/fisma-medium-rhel6-server.xml
@@ -270,7 +270,7 @@
 <select idref="disable_ipv6_module_loading" selected="true" />
 <select idref="network_ipv6_disable_rpc" selected="true" />
 <select idref="set_sysctl_net_ipv6_conf_default_accept_ra" selected="true" />
-<select idref="set_sysctl_ipv6_default_accept_redirects" selected="true" />
+<select idref="set_sysctl_net_ipv6_default_accept_redirects" selected="true" />
 
 <!--	IA-2(1) -->
 <select idref="bootloader_password" selected="true" />
diff --git a/RHEL6/input/profiles/nist-CL-IL-AL.xml b/RHEL6/input/profiles/nist-CL-IL-AL.xml
index 66b4c57..96405c1 100644
--- a/RHEL6/input/profiles/nist-CL-IL-AL.xml
+++ b/RHEL6/input/profiles/nist-CL-IL-AL.xml
@@ -302,7 +302,7 @@ assurance."</description>
 <select idref="disable_ipv6_module_loading" selected="true" \>
 <select idref="network_ipv6_disable_rpc" selected="true" \>
 <select idref="set_sysctl_net_ipv6_conf_default_accept_ra" selected="true" \>
-<select idref="set_sysctl_ipv6_default_accept_redirects" selected="true" \>
+<select idref="set_sysctl_net_ipv6_default_accept_redirects" selected="true" \>
 <select idref="network_disable_unused_interfaces" selected="true" \>
 <select idref="network_disable_zeroconf" selected="true" \>
 <select idref="network_sniffer_disabled" selected="true" \>
diff --git a/RHEL6/input/profiles/usgcb-rhel6-server.xml b/RHEL6/input/profiles/usgcb-rhel6-server.xml
index a03855c..b849c3f 100644
--- a/RHEL6/input/profiles/usgcb-rhel6-server.xml
+++ b/RHEL6/input/profiles/usgcb-rhel6-server.xml
@@ -151,7 +151,7 @@
 <select idref="network_ipv6_disable_rpc" selected="true" />
 <refine-value idref="sysctl_net_ipv6_conf_default_accept_ra_value" selector="disabled" />
 <select idref="set_sysctl_net_ipv6_conf_default_accept_ra" selected="true" />
-<select idref="set_sysctl_ipv6_default_accept_redirects" selected="true" />
+<select idref="set_sysctl_net_ipv6_default_accept_redirects" selected="true" />
 <select idref="enable_ip6tables" selected="true" />
 <select idref="enable_iptables" selected="true" />
 <select idref="set_iptables_default_rule" selected="true" />
diff --git a/RHEL6/input/system/network/ipv6.xml b/RHEL6/input/system/network/ipv6.xml
index 220449e..7a38f40 100644
--- a/RHEL6/input/system/network/ipv6.xml
+++ b/RHEL6/input/system/network/ipv6.xml
@@ -130,7 +130,7 @@ An illicit router advertisement message could result in a man-in-the-middle atta
 <ref nist="CM-7" />
 </Rule>
 
-<Rule id="set_sysctl_ipv6_default_accept_redirects" severity="medium">
+<Rule id="set_sysctl_net_ipv6_default_accept_redirects" severity="medium">
 <title>Disable Accepting IPv6 Redirects</title>
 <description>
 <sysctl-desc-macro sysctl="net.ipv6.conf.default.accept_redirects" value="0" />
-- 
1.7.1



More information about the scap-security-guide mailing list