1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
|
documentation_complete: true
title: 'Disable the IPv6 protocol'
description: |-
Disable support for IP version 6 (IPv6).
{{{ describe_kernel_build_config("CONFIG_IPV6", "n") | indent(4) }}}
rationale: |-
Any unnecessary network stacks, including IPv6, should be disabled to reduce
the vulnerability to exploitation.
warnings:
{{{ warning_kernel_build_config() | indent(4) }}}
severity: medium
identifiers:
cce@rhel8: CCE-87225-9
cce@rhel9: CCE-87226-7
ocil_clause: 'the kernel was not built with the required value'
ocil: |-
{{{ ocil_kernel_build_config("CONFIG_IPV6", "n") | indent(4) }}}
template:
name: kernel_build_config
vars:
config: CONFIG_IPV6
value: 'n'
|
