[PATCH 5/5] Added rule for disabling interface use of IPv6

David Smith dsmith at eclipse.ncsc.mil
Thu Jul 25 16:38:46 UTC 2013


Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
---
 RHEL6/input/system/network/ipv6.xml |    9 ++++++++-
 1 files changed, 8 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/system/network/ipv6.xml b/RHEL6/input/system/network/ipv6.xml
index 7a38f40..8a79b4e 100644
--- a/RHEL6/input/system/network/ipv6.xml
+++ b/RHEL6/input/system/network/ipv6.xml
@@ -51,6 +51,13 @@ the vulnerability to exploitation.
 <tested by="DS" on="20121024"/>
 </Rule>
 
+<Rule id="network_ipv6_disable_interfaces">
+<title>Disable Interface Usage of IPv6</title>
+<description>To disable interface usage of IPv6, add or correct the following lines in <tt>/etc/sysconfig/network</tt>:
+<pre>NETWORKING_IPV6=no
+IPV6INIT=no</pre>
+</description>
+</Rule>
 
 <Rule id="network_ipv6_disable_rpc">
 <title>Disable Support for RPC IPv6</title>
@@ -130,7 +137,7 @@ An illicit router advertisement message could result in a man-in-the-middle atta
 <ref nist="CM-7" />
 </Rule>
 
-<Rule id="set_sysctl_net_ipv6_default_accept_redirects" severity="medium">
+<Rule id="set_sysctl_ipv6_default_accept_redirects" severity="medium">
 <title>Disable Accepting IPv6 Redirects</title>
 <description>
 <sysctl-desc-macro sysctl="net.ipv6.conf.default.accept_redirects" value="0" />
-- 
1.7.1



More information about the scap-security-guide mailing list