Merge pull request #152 from joubbi/source_routing

Disable source routing for IPv6.
dev-sec · Mar 24, 2021 · 7e2ddf6 · 7e2ddf6
2 parents 5487f62 + 39591a2
commit 7e2ddf6
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/controls/sysctl_spec.rb b/controls/sysctl_spec.rb
@@ -167,6 +167,12 @@
   describe kernel_parameter('net.ipv4.conf.default.accept_source_route') do
     its(:value) { should eq 0 }
   end
+  describe kernel_parameter('net.ipv6.conf.all.accept_source_route') do
+    its(:value) { should eq 0 }
+  end
+  describe kernel_parameter('net.ipv6.conf.default.accept_source_route') do
+    its(:value) { should eq 0 }
+  end
 end
 
 control 'sysctl-14' do