Use Privacy Extensions for Address
An XCCDF Rule
Description
To introduce randomness into the automatic generation of IPv6
addresses, add or correct the following line in
/etc/sysconfig/network-scripts/ifcfg-interface
:
IPV6_PRIVACY=rfc3041Automatically-generated IPv6 addresses are based on the underlying hardware (e.g. Ethernet) address, and so it becomes possible to track a piece of hardware over its lifetime using its traffic. If it is important for a system's IP address to not trivially reveal its hardware address, this setting should be applied.
- ID
- xccdf_org.ssgproject.content_rule_network_ipv6_privacy_extensions
- Severity
- Unknown
- References
- Updated