[PATCH 06/21] Add reload to set_ip6tables_default_rule
Shawn Wells
shawn at redhat.com
Mon Jul 28 03:35:42 UTC 2014
On 7/27/14, 11:26 PM, Shawn Wells wrote:
> From: Leland Steinke<leland.j.steinke.ctr at mail.mil>
>
> Guidance did not remind users to reload firewall rules if a change was required
>
> Signed-off-by: Leland Steinke<leland.j.steinke.ctr at mail.mil>
> ---
> RHEL/6/input/system/network/iptables.xml | 2 ++
> 1 files changed, 2 insertions(+), 0 deletions(-)
>
> diff --git a/RHEL/6/input/system/network/iptables.xml b/RHEL/6/input/system/network/iptables.xml
> index 639b16e..0876645 100644
> --- a/RHEL/6/input/system/network/iptables.xml
> +++ b/RHEL/6/input/system/network/iptables.xml
> @@ -73,6 +73,8 @@ the built-in INPUT chain which processes incoming packets,
> add or correct the following line in
> <tt>/etc/sysconfig/ip6tables</tt>:
> <pre>:INPUT DROP [0:0]</pre>
> +If changes were required, reload the ip6tables rules:
> +<pre>$ sudo service ip6tables reload</pre>
> </description>
> <ocil clause="the default policy for the INPUT chain is not set to DROP">
> If IPv6 is disabled, this is not applicable.
> -- 1.7.1
ack
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140727/ddfe2891/attachment.html>
More information about the scap-security-guide
mailing list