Configure Sending and Accepting Shared Media Redirects by Default
An XCCDF Rule
Description
To set the runtime status of the net.ipv4.conf.default.shared_media
kernel parameter, run the following command:
$ sudo sysctl -w net.ipv4.conf.default.shared_media=To make sure that the setting is persistent, add the following line to a file in the directory
/etc/sysctl.d
: net.ipv4.conf.default.shared_media =
Rationale
This setting should be aligned with net.ipv4.conf.default.secure_redirects
because it overrides it.
If shared_media
is enabled for an interface secure_redirects
will be enabled too.
- ID
- xccdf_org.ssgproject.content_rule_sysctl_net_ipv4_conf_default_shared_media
- Severity
- Medium
- References
- Updated