| # CIS 3.3.3 Ensure IPv6 is disabled |
| # |
| # Description |
| # =========== |
| # Although IPv6 has many advantages over IPv4, few organizations have |
| # implemented IPv6. |
| # |
| # Rationale |
| # ========= |
| # If IPv6 is not to be used, it is recommended that it be disabled to |
| # reduce the attack surface of the system. |
| # |
| # Audit |
| # ====== |
| # Run the following command and verify that each linux line has |
| # the 'ipv6.disable=1' parameter set: |
| # |
| # # grep "^\s*linux" /boot/grub/grub.cfg |
| # |
| # Remediation |
| # =========== |
| # Edit /etc/default/grub and add 'ipv6.disable=1' to GRUB_CMDLINE_LINUX: |
| # |
| # GRUB_CMDLINE_LINUX="ipv6.disable=1" |
| # |
| # Run the following command to update the grub2 configuration: |
| # |
| # # update-grub |
| # |
| parameters: |
| linux: |
| system: |
| kernel: |
| boot_options: |
| - ipv6.disable=1 |