[PATCH] [bugfix] Updated APIPA addresses as identified by David Smith
Shawn Wells
shawn.d.wells at gmail.com
Sat Sep 7 19:42:05 UTC 2013
-------------- next part --------------
>From 5c30726bd33230afccaaba6fc5a4aede34fa51c1 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Sat, 7 Sep 2013 15:40:32 -0400
Subject: [PATCH] [bugfix] Updated APIPA addresses as identified by David Smith
Dave noted that some of the APIPA addresses were typod as 169.245.0.0, vs
correct 169.254.0.0.
---
RHEL6/input/checks/network_disable_zeroconf.xml | 2 +-
RHEL6/input/system/network/network.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/RHEL6/input/checks/network_disable_zeroconf.xml b/RHEL6/input/checks/network_disable_zeroconf.xml
index 1698103..cb8add4 100644
--- a/RHEL6/input/checks/network_disable_zeroconf.xml
+++ b/RHEL6/input/checks/network_disable_zeroconf.xml
@@ -6,7 +6,7 @@
<platform>Red Hat Enterprise Linux 6</platform>
</affected>
<description>Disable Zeroconf automatic route assignment in the
- 169.245.0.0 subnet.</description>
+ 169.254.0.0 subnet.</description>
<reference source="MED" ref_id="20130813" ref_url="test_attestation" />
</metadata>
<criteria>
diff --git a/RHEL6/input/system/network/network.xml b/RHEL6/input/system/network/network.xml
index 9c30337..aab0382 100644
--- a/RHEL6/input/system/network/network.xml
+++ b/RHEL6/input/system/network/network.xml
@@ -36,7 +36,7 @@ communication over the loopback device, then disable this service.
<description>Zeroconf networking allows the system to assign itself an IP
address and engage in IP communication without a statically-assigned address or
even a DHCP server. Automatic address assignment via Zeroconf (or DHCP) is not
-recommended. To disable Zeroconf automatic route assignment in the 169.245.0.0
+recommended. To disable Zeroconf automatic route assignment in the 169.254.0.0
subnet, add or correct the following line in <tt>/etc/sysconfig/network</tt>:
<pre>NOZEROCONF=yes</pre>
</description>
--
1.7.1
More information about the scap-security-guide
mailing list