<def-group>
  <definition class="compliance" id="sysctl_kernel_ipv6_disable" version="2">
    <metadata>
      <title>Kernel Runtime Parameter IPv6 Check</title>
      <affected family="unix">
	<platform>multi_platform_alinux</platform>
	<platform>multi_platform_almalinux</platform>
	<platform>multi_platform_anolis</platform>
	<platform>multi_platform_debian</platform>
	<platform>multi_platform_example</platform>
	<platform>multi_platform_fedora</platform>
	<platform>multi_platform_kylinserver</platform>
	<platform>multi_platform_openembedded</platform>
	<platform>multi_platform_openeuler</platform>
	<platform>multi_platform_opensuse</platform>
	<platform>multi_platform_ol</platform>
	<platform>multi_platform_rhcos</platform>
	<platform>multi_platform_rhel</platform>
	<platform>multi_platform_rhv</platform>
	<platform>multi_platform_sle</platform>
    <platform>multi_platform_slmicro</platform>
    <platform>multi_platform_tencentos</platform>
    <platform>multi_platform_ubuntu</platform>
      </affected>
      <description>Disables IPv6 for all network interfaces.</description>
    </metadata>
    <criteria comment="IPv6 disabled or net.ipv6.conf.all.disable_ipv6 set correctly" operator="OR">
      <criteria operator="AND">
        <extend_definition comment="net.ipv6.conf.all.disable_ipv6 configuration setting check" definition_ref="sysctl_net_ipv6_conf_all_disable_ipv6_static" />
        <extend_definition comment="net.ipv6.conf.all.disable_ipv6 runtime setting check" definition_ref="sysctl_net_ipv6_conf_all_disable_ipv6_runtime" />
      </criteria>
    </criteria>
  </definition>

</def-group>
