<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <br>
    <div class="moz-cite-prefix">On 7/27/14, 11:26 PM, Shawn Wells
      wrote:<br>
    </div>
    <blockquote
      cite="mid:1406518028-3921-5-git-send-email-shawn@redhat.com"
      type="cite">
      <div class="moz-text-plain" wrap="true" graphical-quote="true"
        style="font-family: -moz-fixed; font-size: 12px;"
        lang="x-unicode">
        <pre wrap="">From: Leland Steinke <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:leland.j.steinke.ctr@mail.mil">&lt;leland.j.steinke.ctr@mail.mil&gt;</a>

- For some reason the set_ip6tables_default_rule was not enabled in common (whereas standard ip4 is);
- Mapped set_ip6tables_default_rule to RHEL-06-000523

Signed-off-by: Leland Steinke <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:leland.j.steinke.ctr@mail.mil">&lt;leland.j.steinke.ctr@mail.mil&gt;</a>
---
 RHEL/6/input/auxiliary/stig_overlay.xml |    4 ++--
 RHEL/6/input/profiles/common.xml        |    1 +
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/RHEL/6/input/auxiliary/stig_overlay.xml b/RHEL/6/input/auxiliary/stig_overlay.xml
index e75aeaf..f78506e 100644
--- a/RHEL/6/input/auxiliary/stig_overlay.xml
+++ b/RHEL/6/input/auxiliary/stig_overlay.xml
@@ -1309,8 +1309,8 @@
                 &lt;VMSinfo VKey="38445" SVKey="50245" VRelease="1" /&gt;
                 &lt;title&gt;Audit log files must be group-owned by root.&lt;/title&gt;
         &lt;/overlay&gt;
-        &lt;overlay owner="disastig" ruleid="XXXX" ownerid="RHEL-06-000523" disa="66" severity="medium"&gt;
-                &lt;VMSinfo VKey="38444" SVKey="50244" VRelease="1" /&gt;
+        &lt;overlay owner="disastig" ruleid="set_ip6tables_default_rule" ownerid="RHEL-06-000523" disa="66" severity="medium"&gt;
+                &lt;VMSinfo VKey="38444" SVKey="50244" VRelease="2" /&gt;
                 &lt;title&gt;The system's local IPv6 firewall must implement a deny-all, allow-by-exception policy for inbound packets.&lt;/title&gt;
         &lt;/overlay&gt;
         &lt;overlay owner="disastig" ruleid="XXXX" ownerid="RHEL-06-000524" disa="15" severity="low"&gt;
diff --git a/RHEL/6/input/profiles/common.xml b/RHEL/6/input/profiles/common.xml
index ba46588..d3ec71b 100644
--- a/RHEL/6/input/profiles/common.xml
+++ b/RHEL/6/input/profiles/common.xml
@@ -94,6 +94,7 @@
 &lt;select idref="service_ip6tables_enabled" selected="true"/&gt;
 &lt;select idref="service_iptables_enabled" selected="true"/&gt;
 &lt;select idref="set_iptables_default_rule" selected="true"/&gt;
+&lt;select idref="set_ip6tables_default_rule" selected="ture" /&gt;
 &lt;select idref="kernel_module_dccp_disabled" selected="true"/&gt;
 &lt;select idref="kernel_module_sctp_disabled" selected="true"/&gt;
 &lt;select idref="kernel_module_rds_disabled" selected="true"/&gt;
<div class="moz-txt-sig">-- 
1.7.1
</div></pre>
      </div>
    </blockquote>
    <br>
    ack<br>
  </body>
</html>