openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/source/developer-notes/V-38546.rst
Major Hayden eed08c4294 V-38546: Disable IPv6 system-wide 
This is a serious change to consider and it requires a deployer to opt-in.

Implements: blueprint security-hardening

Change-Id: I7e387ea5cacd1dd67419c3a3d2474bf37357d097
2015-10-15 07:50:33 -05:00

428 B
Raw Blame History

Opt-in required

The STIG requires IPv6 to be disabled system-wide unless it is needed for the system to operate. Deployers must consider how their network is configured before disabling IPv6 entirely.

To opt-in for this change, set the following Ansible variable to yes:

disable_ipv6: yes

NOTE: This change will go into effect immediately on the system and persist through reboots.