16 lines
375 B
ReStructuredText
16 lines
375 B
ReStructuredText
---
|
|
id: V-38524
|
|
status: opt-in
|
|
tag: kernel
|
|
---
|
|
|
|
The STIG requires that ICMPv4 redirects are disabled on the host. However, this
|
|
can cause problems with LXC-based deployments, such as environments deployed
|
|
with OpenStack-Ansible.
|
|
|
|
Deployers can opt-in for this change by setting the following Ansible variable:
|
|
|
|
.. code-block:: yaml
|
|
|
|
security_disable_icmpv4_redirects: yes
|