Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Guide to the Secure Configuration of Red Hat Enterprise Linux 7
System Settings
Network Configuration and Firewalls
IPv6
Disable Support for IPv6 Unless Needed
Disable IPv6 Networking Support Automatic Loading
Disable IPv6 Networking Support Automatic Loading
An XCCDF Rule
Details
Profiles
Prose
Disable IPv6 Networking Support Automatic Loading
Medium Severity
To prevent the IPv6 kernel module (
ipv6
) from binding to the IPv6 networking stack, add the following line to
/etc/modprobe.d/disabled.conf
(or another file in
/etc/modprobe.d
):
options ipv6 disable=1
This permits the IPv6 module to be loaded (and thus satisfy other modules that depend on it), while disabling support for the IPv6 protocol.