extend sysctls for ipv6

see https://docs.vmware.com/en/vRealize-Operations/8.6/com.vmware.vcom.core.doc/GUID-16BDA67D-914A-484C-97CA-8624F4881605.html and https://docs.vmware.com/en/vRealize-Operations/8.6/com.vmware.vcom.core.doc/GUID-37B91C4A-5E1E-4F8E-BC59-B3552BA7CDFA.html also see dev-sec/ansible-collection-hardening#607 Signed-off-by: Sebastian Gumprich <[email protected]>
dev-sec · Nov 30, 2022 · c15739b · c15739b
1 parent 666e709
commit c15739b
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/controls/sysctl_spec.rb b/controls/sysctl_spec.rb
@@ -258,6 +258,9 @@
   describe kernel_parameter('net.ipv6.conf.default.router_solicitations') do
     its(:value) { should eq 0 }
   end
+  describe kernel_parameter('net.ipv6.conf.all.router_solicitations') do
+    its(:value) { should eq 0 }
+  end
 end
 
 control 'sysctl-22' do
@@ -311,6 +314,9 @@
   describe kernel_parameter('net.ipv6.conf.default.autoconf') do
     its(:value) { should eq 0 }
   end
+  describe kernel_parameter('net.ipv6.all.default.autoconf') do
+    its(:value) { should eq 0 }
+  end
 end
 
 control 'sysctl-27' do