7.3.3 Disable IPv6 - net.ipv6.conf.lo.disable_ipv6

Information

Although IPv6 has many advantages over IPv4, few organizations have implemented IPv6. If IPv6 is not to be used, it is recommended that it be disabled to reduce the attack surface of the system.

Solution

Create or edit the file /etc/sysctl.conf and add the following lines- net.ipv6.conf.all.disable_ipv6=1net.ipv6.conf.default.disable_ipv6=1net.ipv6.conf.lo.disable_ipv6=1 Run the following command or reboot to apply the changes- # sysctl -p

See Also

https://workbench.cisecurity.org/files/85

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CM-7b., 800-53|SC-7(12), CSCv6|9.1, CSCv6|9.2

Plugin: Unix

Control ID: 3bdc64031d22133e553faae2dc3b46027763940472d018caedfe0f6b81469ef5