ComplianceAsCode / content

Security automation content in SCAP, Bash, Ansible, and other formats
https://complianceascode.readthedocs.io/en/latest/
Other
2.23k stars 698 forks source link

CIS 3.2.3 Ensure secure ICMP redirects are not accepted (Scored) #5235

Closed shawndwells closed 4 years ago

shawndwells commented 4 years ago

Need new rule for net.ipv4.cof.default.secure_redirects

yuumasato commented 4 years ago

The rule exists already: https://github.com/ComplianceAsCode/content/blob/master/rhel8/profiles/cis.profile#L374