Disable source routing for IPv6. See c3b5a3afd01eb06d184e9cac6c1df6b8…

…5a36e13b Signed-off-by: Farid Joubbi <[email protected]>
dev-sec · Mar 24, 2021 · 39591a2 · 39591a2
1 parent 5487f62
commit 39591a2
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/controls/sysctl_spec.rb b/controls/sysctl_spec.rb
@@ -167,6 +167,12 @@
   describe kernel_parameter('net.ipv4.conf.default.accept_source_route') do
     its(:value) { should eq 0 }
   end
+  describe kernel_parameter('net.ipv6.conf.all.accept_source_route') do
+    its(:value) { should eq 0 }
+  end
+  describe kernel_parameter('net.ipv6.conf.default.accept_source_route') do
+    its(:value) { should eq 0 }
+  end
 end
 
 control 'sysctl-14' do