andersen/ansible-collection-hardening
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Not accepting source routing for IPv6. This was already done for IPv4. (#424)

Browse Source 
Signed-off-by: Farid Joubbi <[email protected]>
This commit is contained in:
Farid Joubbi authored and GitHub committed 2021-03-24 07:55:29 +01:00
1 parent dfa89f7b47
commit d1143a06b1
1 file changed
+2
Download Patch File Download Diff File Expand all files Collapse all files
roles/os_hardening/defaults/main.yml
+2
View File
@@ -202,6 +202,8 @@ sysctl_config:
# so disable it if not needed. | sysctl-13 # so disable it if not needed. | sysctl-13
net.ipv4.conf.all.accept_source_route: 0 net.ipv4.conf.all.accept_source_route: 0
net.ipv4.conf.default.accept_source_route: 0 net.ipv4.conf.default.accept_source_route: 0
net.ipv6.conf.all.accept_source_route: 0
net.ipv6.conf.default.accept_source_route: 0
# For non-routers: don't send redirects. # For non-routers: don't send redirects.
# An attacker could use a compromised host to send invalid ICMP redirects to other # An attacker could use a compromised host to send invalid ICMP redirects to other