diff --git a/linux_os/guide/system/network/network-ipv6/disabling_ipv6/kernel_module_ipv6_option_disabled/rule.yml b/linux_os/guide/system/network/network-ipv6/disabling_ipv6/kernel_module_ipv6_option_disabled/rule.yml index 6e01799d88..cf3b2ca4b7 100644 --- a/linux_os/guide/system/network/network-ipv6/disabling_ipv6/kernel_module_ipv6_option_disabled/rule.yml +++ b/linux_os/guide/system/network/network-ipv6/disabling_ipv6/kernel_module_ipv6_option_disabled/rule.yml @@ -19,9 +19,12 @@ severity: medium identifiers: cce@rhel6: 27153-6 + cce@rhel7: 82871-5 + cce@rhel8: 82872-3 references: disa@rhel6: "1551" + cis@rhel8: "3.6" nist: CM-7(a),CM-7(b),CM-6(a) nist-csf: PR.IP-1,PR.PT-3 srg@rhel6: SRG-OS-999999 diff --git a/linux_os/guide/system/network/network-uncommon/kernel_module_rds_disabled/rule.yml b/linux_os/guide/system/network/network-uncommon/kernel_module_rds_disabled/rule.yml index f19e548863..54cfc9fa41 100644 --- a/linux_os/guide/system/network/network-uncommon/kernel_module_rds_disabled/rule.yml +++ b/linux_os/guide/system/network/network-uncommon/kernel_module_rds_disabled/rule.yml @@ -4,7 +4,7 @@ title: 'Disable RDS Support' description: |- The Reliable Datagram Sockets (RDS) protocol is a transport - layer protocol designed to provide reliable high- bandwidth, + layer protocol designed to provide reliable high-bandwidth, low-latency communications between nodes in a cluster. {{{ describe_module_disable(module="rds") }}} @@ -12,13 +12,16 @@ rationale: |- Disabling RDS protects the system against exploitation of any flaws in its implementation. -severity: unknown +severity: low identifiers: cce@rhel6: 26239-4 + cce@rhel7: 82869-9 + cce@rhel8: 82870-7 references: disa@rhel6: "382" + cis@rhel8: 3.3.3 nist: CM-7(a),CM-7(b),CM-6(a) nist-csf: PR.IP-1,PR.PT-3 srg@rhel6: SRG-OS-000096