ansible-hardening/doc/metadata/rhel6/V-38524.rst

---id: V-38524 status: opt-in tag: kernel ---

The STIG requires that ICMPv4 redirects are disabled on the host. However, this can cause problems with LXC-based deployments, such as environments deployed with OpenStack-Ansible.

Deployers can opt-in for this change by setting the following Ansible variable:

security_disable_icmpv4_redirects: yes