7.3.3 Disable IPv6- 'net.ipv6.conf.all.disable_ipv6=1'

Information

Although IPv6 has many advantages over IPv4, few organizations have implemented IPv6.

*Rationale*

If IPv6 is not to be used, it is recommended that it be disabled to reduce the attack surface
of the system.

Solution

Create or edit the file /etc/sysctl.conf and add the following lines-net.ipv6.conf.all.disable_ipv6=1
net.ipv6.conf.default.disable_ipv6=1
net.ipv6.conf.lo.disable_ipv6=1

Run the following command or reboot to apply the changes-# sysctl -p

See Also

https://workbench.cisecurity.org/files/91

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CM-7b., 800-53|SC-7(12), CSCv6|9.1, CSCv6|9.2

Plugin: Unix

Control ID: 496bc94dcb9705e6fabf707935682685d7033bfc4c473f8d12083566b6547c72