Remaining false positives

Andrew Gilmore agilmore2 at gmail.com
Wed Jan 15 21:12:49 UTC 2014


On Wed, Jan 15, 2014 at 1:27 PM, Rodney L. Mercer <rmercer at harris.com>wrote:

> > 7) sysctl_ipv6_default_accept_redirects and service_ip6tables_enabled
>  > fail when ipv6 has been disabled via modprobe.d entries
>
> ???
>
> https://git.fedorahosted.org/cgit/scap-security-guide.git/commit/?id=6a271a5df50529dc0ee4800dfce0933114c4677b
>
>
That's correct, sysctl_ipv6_default_accept_redirects is no longer showing a
false positive.
service_ip6tables_enabled is still a problem.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140115/c1ed9e90/attachment.html>


More information about the scap-security-guide mailing list