diff options
| author |   zshi <zshi@redhat.com> | 2017-04-06 18:11:26 +0800 |
|---|---|---|
| committer | zshi <zshi@redhat.com> | 2017-04-11 15:29:04 +0800 |
| commit | d22484d389b1e2f5e9dd9ea6d9f4196effa31f1c (patch) | |
| tree | 04be32083bd352266c8f2d03163ea5237339b5c2 /releasenotes/notes | |
| parent | e10ddcc3d2cbbd27b77a528a643adf7ca334c08e (diff) | |
Add IPv6 disable option
This will give user the ability to set these values,
if IPv6 is not to be used, it's recommended that it be
disabled to reduce the attack surface of the system.
Change-Id: Ib3142cce49b93a421ca142a59961ce49a77e66b1
Co-Authored-By: Luke Hinds <lhinds@redhat.com>
Signed-off-by: zshi <zshi@redhat.com>
Diffstat (limited to 'releasenotes/notes')
| -rw-r--r-- | releasenotes/notes/add-ipv6-diable-options-9aaee219bb87ac6a.yaml | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/releasenotes/notes/add-ipv6-diable-options-9aaee219bb87ac6a.yaml b/releasenotes/notes/add-ipv6-diable-options-9aaee219bb87ac6a.yaml new file mode 100644 index 00000000..8b57f587 --- /dev/null +++ b/releasenotes/notes/add-ipv6-diable-options-9aaee219bb87ac6a.yaml @@ -0,0 +1,7 @@ +--- +security: + - | + Add IPv6 disable option and make it configurable for user to disable IPv6 + when it's not used, this will descrease the risk of ipv6 attack. + Both net.ipv6.conf.default.disable_ipv6 & net.ipv6.conf.all.disable_ipv6 + will be explicitly set to the default value (0) which is enabled. |