fix IPv6 hardening (#607)

Signed-off-by: DonEstefan <[email protected]> Signed-off-by: DonEstefan <[email protected]> Co-authored-by: donestefan <[email protected]>
dev-sec · Nov 30, 2022 · bb3c63e · bb3c63e
1 parent d3e6df3
commit bb3c63e
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/roles/os_hardening/defaults/main.yml b/roles/os_hardening/defaults/main.yml
@@ -261,6 +261,7 @@ sysctl_config:
 
   # Disable acceptance of IPv6 router solicitations messages | sysctl-21
   net.ipv6.conf.default.router_solicitations: 0
+  net.ipv6.conf.all.router_solicitations: 0
 
   # Disable Accept Router Preference from router advertisement | sysctl-22
   net.ipv6.conf.default.accept_ra_rtr_pref: 0
@@ -273,6 +274,7 @@ sysctl_config:
 
   # Disable IPv6 autoconfiguration | sysctl-26
   net.ipv6.conf.default.autoconf: 0
+  net.ipv6.conf.all.autoconf: 0
 
   # Disable neighbor solicitations to send out per address | sysctl-27
   net.ipv6.conf.default.dad_transmits: 0