{"description": "A major feature of IPv6 is the extent to which systems\nimplementing it can automatically configure their networking\ndevices using information from the network. From a security\nperspective, manually configuring important configuration\ninformation is preferable to accepting it from the network\nin an unauthenticated fashion.", "warnings": [], "requires": [], "conflicts": [], "values": ["sysconfig_network_IPV6_AUTOCONF_value", "sysctl_net_ipv6_conf_all_accept_ra_defrtr_value", "sysctl_net_ipv6_conf_all_accept_ra_pinfo_value", "sysctl_net_ipv6_conf_all_accept_ra_rtr_pref_value", "sysctl_net_ipv6_conf_all_accept_ra_value", "sysctl_net_ipv6_conf_all_accept_redirects_value", "sysctl_net_ipv6_conf_all_accept_source_route_value", "sysctl_net_ipv6_conf_all_autoconf_value", "sysctl_net_ipv6_conf_all_forwarding_value", "sysctl_net_ipv6_conf_all_max_addresses_value", "sysctl_net_ipv6_conf_all_router_solicitations_value", "sysctl_net_ipv6_conf_default_accept_ra_defrtr_value", "sysctl_net_ipv6_conf_default_accept_ra_pinfo_value", "sysctl_net_ipv6_conf_default_accept_ra_rtr_pref_value", "sysctl_net_ipv6_conf_default_accept_ra_value", "sysctl_net_ipv6_conf_default_accept_redirects_value", "sysctl_net_ipv6_conf_default_accept_source_route_value", "sysctl_net_ipv6_conf_default_autoconf_value", "sysctl_net_ipv6_conf_default_forwarding_value", "sysctl_net_ipv6_conf_default_max_addresses_value", "sysctl_net_ipv6_conf_default_router_solicitations_value"], "groups": ["network_ipv6_limit_requests"], "rules": ["network_ipv6_default_gateway", "network_ipv6_privacy_extensions", "network_ipv6_static_address", "sysctl_net_ipv6_conf_all_accept_ra", "sysctl_net_ipv6_conf_all_accept_ra_defrtr", "sysctl_net_ipv6_conf_all_accept_ra_pinfo", "sysctl_net_ipv6_conf_all_accept_ra_rtr_pref", "sysctl_net_ipv6_conf_all_accept_redirects", "sysctl_net_ipv6_conf_all_accept_source_route", "sysctl_net_ipv6_conf_all_autoconf", "sysctl_net_ipv6_conf_all_forwarding", "sysctl_net_ipv6_conf_all_max_addresses", "sysctl_net_ipv6_conf_all_router_solicitations", "sysctl_net_ipv6_conf_default_accept_ra", "sysctl_net_ipv6_conf_default_accept_ra_defrtr", "sysctl_net_ipv6_conf_default_accept_ra_pinfo", "sysctl_net_ipv6_conf_default_accept_ra_rtr_pref", "sysctl_net_ipv6_conf_default_accept_redirects", "sysctl_net_ipv6_conf_default_accept_source_route", "sysctl_net_ipv6_conf_default_autoconf", "sysctl_net_ipv6_conf_default_forwarding", "sysctl_net_ipv6_conf_default_max_addresses", "sysctl_net_ipv6_conf_default_router_solicitations"], "platform": "ipv6[enabled]", "platforms": ["ipv6[enabled]"], "inherited_platforms": [], "cpe_platform_names": ["ipv6_enabled"], "title": "Configure IPv6 Settings if Necessary", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/system/network/network-ipv6/configuring_ipv6/group.yml"}