|
 |
dac76a |
diff --git a/linux_os/guide/system/network/network-ipv6/disabling_ipv6/kernel_module_ipv6_option_disabled/rule.yml b/linux_os/guide/system/network/network-ipv6/disabling_ipv6/kernel_module_ipv6_option_disabled/rule.yml
|
|
|
dac76a |
index 6e01799d88..cf3b2ca4b7 100644
|
|
|
dac76a |
--- a/linux_os/guide/system/network/network-ipv6/disabling_ipv6/kernel_module_ipv6_option_disabled/rule.yml
|
|
|
dac76a |
+++ b/linux_os/guide/system/network/network-ipv6/disabling_ipv6/kernel_module_ipv6_option_disabled/rule.yml
|
|
|
dac76a |
@@ -19,9 +19,12 @@ severity: medium
|
|
|
dac76a |
|
|
|
dac76a |
identifiers:
|
|
|
dac76a |
cce@rhel6: 27153-6
|
|
|
dac76a |
+ cce@rhel7: 82871-5
|
|
|
dac76a |
+ cce@rhel8: 82872-3
|
|
|
dac76a |
|
|
|
dac76a |
references:
|
|
|
dac76a |
disa@rhel6: "1551"
|
|
|
dac76a |
+ cis@rhel8: "3.6"
|
|
|
dac76a |
nist: CM-7(a),CM-7(b),CM-6(a)
|
|
|
dac76a |
nist-csf: PR.IP-1,PR.PT-3
|
|
|
dac76a |
srg@rhel6: SRG-OS-999999
|
|
|
dac76a |
diff --git a/linux_os/guide/system/network/network-uncommon/kernel_module_rds_disabled/rule.yml b/linux_os/guide/system/network/network-uncommon/kernel_module_rds_disabled/rule.yml
|
|
|
dac76a |
index f19e548863..54cfc9fa41 100644
|
|
|
dac76a |
--- a/linux_os/guide/system/network/network-uncommon/kernel_module_rds_disabled/rule.yml
|
|
|
dac76a |
+++ b/linux_os/guide/system/network/network-uncommon/kernel_module_rds_disabled/rule.yml
|
|
|
dac76a |
@@ -4,7 +4,7 @@ title: 'Disable RDS Support'
|
|
|
dac76a |
|
|
|
dac76a |
description: |-
|
|
|
dac76a |
The Reliable Datagram Sockets (RDS) protocol is a transport
|
|
|
dac76a |
- layer protocol designed to provide reliable high- bandwidth,
|
|
|
dac76a |
+ layer protocol designed to provide reliable high-bandwidth,
|
|
|
dac76a |
low-latency communications between nodes in a cluster.
|
|
|
dac76a |
{{{ describe_module_disable(module="rds") }}}
|
|
|
dac76a |
|
|
|
dac76a |
@@ -12,13 +12,16 @@ rationale: |-
|
|
|
dac76a |
Disabling RDS protects
|
|
|
dac76a |
the system against exploitation of any flaws in its implementation.
|
|
|
dac76a |
|
|
|
dac76a |
-severity: unknown
|
|
|
dac76a |
+severity: low
|
|
|
dac76a |
|
|
|
dac76a |
identifiers:
|
|
|
dac76a |
cce@rhel6: 26239-4
|
|
|
dac76a |
+ cce@rhel7: 82869-9
|
|
|
dac76a |
+ cce@rhel8: 82870-7
|
|
|
dac76a |
|
|
|
dac76a |
references:
|
|
|
dac76a |
disa@rhel6: "382"
|
|
|
dac76a |
+ cis@rhel8: 3.3.3
|
|
|
dac76a |
nist: CM-7(a),CM-7(b),CM-6(a)
|
|
|
dac76a |
nist-csf: PR.IP-1,PR.PT-3
|
|
|
dac76a |
srg@rhel6: SRG-OS-000096
|