1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
|
<def-group>
<definition class="compliance" id="sysctl_kernel_ipv6_disable" version="2">
<metadata>
<title>Kernel Runtime Parameter IPv6 Check</title>
<affected family="unix">
<platform>multi_platform_alinux</platform>
<platform>multi_platform_almalinux</platform>
<platform>multi_platform_anolis</platform>
<platform>multi_platform_debian</platform>
<platform>multi_platform_example</platform>
<platform>multi_platform_fedora</platform>
<platform>multi_platform_kylinserver</platform>
<platform>multi_platform_openembedded</platform>
<platform>multi_platform_openeuler</platform>
<platform>multi_platform_opensuse</platform>
<platform>multi_platform_ol</platform>
<platform>multi_platform_rhcos</platform>
<platform>multi_platform_rhel</platform>
<platform>multi_platform_rhv</platform>
<platform>multi_platform_sle</platform>
<platform>multi_platform_slmicro</platform>
<platform>multi_platform_tencentos</platform>
<platform>multi_platform_ubuntu</platform>
</affected>
<description>Disables IPv6 for all network interfaces.</description>
</metadata>
<criteria comment="IPv6 disabled or net.ipv6.conf.all.disable_ipv6 set correctly" operator="OR">
<criteria operator="AND">
<extend_definition comment="net.ipv6.conf.all.disable_ipv6 configuration setting check" definition_ref="sysctl_net_ipv6_conf_all_disable_ipv6_static" />
<extend_definition comment="net.ipv6.conf.all.disable_ipv6 runtime setting check" definition_ref="sysctl_net_ipv6_conf_all_disable_ipv6_runtime" />
</criteria>
</criteria>
</definition>
</def-group>
|
