CCE-90610-7| Platform: rhel7,centos7 | Date: (C)2017-06-29 (M)2022-10-10 |
Verify ip6tables Enabled if Using IPv6
The 'ip6tables' service can be enabled with the following command:
'$ sudo systemctl enable ip6tables'
Parameter:
Technical Mechanism:
The 'ip6tables' service provides the system's host-based firewalling
capability for IPv6 and ICMPv6.
Fix:
#
# Enable ip6tables.service for all systemd targets
#
systemctl enable ip6tables.service
#
# Start ip6tables.service if not currently running
#
systemctl start ip6tables.service
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : | Attack Vector: |
| Exploit Score: | Attack Complexity: |
| Impact Score: | Privileges Required: |
| Severity: | User Interaction: |
| Vector: | Scope: |
| | Confidentiality: |
| | Integrity: |
| | Availability: |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:31025 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:30302 |
