mediumnetworkverified ✓rollback-safe
Ensure net.ipv6.conf.all.accept_source_route is set to 0
sysctl-net-ipv6-conf-all-accept-source-route · RHEL ≥ 8 · 1 impl
Description
The kernel parameter net.ipv6.conf.all.accept_source_route must be set to 0 to enforce this network/kernel security control.
Rationale
Improper network kernel parameters can allow network-based attacks including packet redirection, source routing, and denial of service.
Check → Remediate
Checksysctl_value
- key:
- net.ipv6.conf.all.accept_source_route
- expected:
- 0
Remediatesysctl_set
- key:
- net.ipv6.conf.all.accept_source_route
- value:
- 0
Framework references
CIS
rhel8 3.3.2.5rhel10 3.3.2.5
STIG
V-281356 / RHEL-10-800240V-230538 / RHEL-08-040240V-257973 / RHEL-09-254020
Live verification
rhel10:checkrhel8:checkrhel9:check
#sysctl#networking#hardening