andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix IPv6 hardening (#607)

Browse Source 
Signed-off-by: DonEstefan <[email protected]>

Signed-off-by: DonEstefan <[email protected]>
Co-authored-by: donestefan <[email protected]>
This commit is contained in:
DonEstefananddonestefan authored and GitHub committed 2022-11-30 16:13:25 +01:00
1 parent d3e6df3dbf
commit bb3c63e321
1 file changed
+2
Download Patch File Download Diff File Expand all files Collapse all files
roles/os_hardening/defaults/main.yml
+2
View File
@@ -261,6 +261,7 @@ sysctl_config:
# Disable acceptance of IPv6 router solicitations messages | sysctl-21 # Disable acceptance of IPv6 router solicitations messages | sysctl-21
net.ipv6.conf.default.router_solicitations: 0 net.ipv6.conf.default.router_solicitations: 0
net.ipv6.conf.all.router_solicitations: 0
# Disable Accept Router Preference from router advertisement | sysctl-22 # Disable Accept Router Preference from router advertisement | sysctl-22
net.ipv6.conf.default.accept_ra_rtr_pref: 0 net.ipv6.conf.default.accept_ra_rtr_pref: 0
@@ -273,6 +274,7 @@ sysctl_config:
# Disable IPv6 autoconfiguration | sysctl-26 # Disable IPv6 autoconfiguration | sysctl-26
net.ipv6.conf.default.autoconf: 0 net.ipv6.conf.default.autoconf: 0
net.ipv6.conf.all.autoconf: 0
# Disable neighbor solicitations to send out per address | sysctl-27 # Disable neighbor solicitations to send out per address | sysctl-27
net.ipv6.conf.default.dad_transmits: 0 net.ipv6.conf.default.dad_transmits: 0