Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Not accepting source routing for IPv6. This was already done for IPv4. #424

Merged
merged 1 commit into from
Mar 24, 2021
Merged

Not accepting source routing for IPv6. This was already done for IPv4. #424

merged 1 commit into from
Mar 24, 2021

Conversation

joubbi
Copy link
Contributor

@joubbi joubbi commented Mar 17, 2021

My guess is that someone forgot to add this for IPv6 when it was added for IPv4.
This is also recommended by CIS.

Signed-off-by: Farid Joubbi farid@joubbi.se

Signed-off-by: Farid Joubbi <farid@joubbi.se>
@schurzi
Copy link
Contributor

schurzi commented Mar 23, 2021

we will merge this, but we also need an PR for our baseline. Can you do it, or should I add this?

https://github.com/dev-sec/linux-baseline/blob/638dee60b92f4b00955e03313bbcc5cda9e0d7be/controls/sysctl_spec.rb#L159-L170

@joubbi
Copy link
Contributor Author

joubbi commented Mar 24, 2021

It seemed simple enough, so I modified the baseline.

@rndmh3ro rndmh3ro merged commit d1143a0 into dev-sec:master Mar 24, 2021
divialth pushed a commit to divialth/ansible-collection-hardening that referenced this pull request Aug 3, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants