openstack/ansible-hardening
Code Issues Proposed changes

Add release note for V-38524 implementation

Browse Source 
This patch is a follow on patch for change
I228f8aa7b0df80cce16e54c5f1e11da678bfd67d that implemented V-38524.

Change-Id: I77b1c141e9de1fd949b18bc693c68fea56b8e2d6
This commit is contained in:
Major Hayden 2016-06-07 08:30:38 -05:00
parent 41260da8ac
commit 24f3f73717
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
releasenotes/notes/implemented-v38524-b357edec95128307.yaml Normal file
View File

@ -0,0 +1,12 @@
---
features:
- |
A task was added that restricts ICMPv4 redirects to meet the requirements
of V-38524 in the STIG. This configuration is disabled by default since
it could cause issues with LXC in some environments.
Deployers can enable this configuration by setting an Ansible variable:
.. code-block:: yaml
security_disable_icmpv4_redirects: yes