<def-group>
  <definition class="compliance" id="kernel_module_ipv6_option_disabled" version="1">
    <metadata>
      <title>Disable IPv6 Kernel Module Functionality via Disable Option</title>
      <affected family="unix">
        <platform>Red Hat Enterprise Linux 6</platform>
      </affected>
      <description>The disable option will allow the IPv6 module to be inserted, but prevent address assignment and activation of the network stack.</description>
      <reference source="DS" ref_id="20131018" ref_url="test_attestation" />
    </metadata>
    <criteria>
      <criterion test_ref="test_kernel_module_ipv6_option_disabled" comment="ipv6 disabled any modprobe conf file"/>
    </criteria>
  </definition>
  <ind:textfilecontent54_test id="test_kernel_module_ipv6_option_disabled" version="1" check="all" comment="ipv6 disabled any modprobe conf file">
    <ind:object object_ref="object_kernel_module_ipv6_option_disabled"/>
  </ind:textfilecontent54_test>
  <ind:textfilecontent54_object id="object_kernel_module_ipv6_option_disabled" version="1" comment="ipv6 disabled any modprobe conf file">
    <ind:path>/etc/modprobe.d</ind:path>
    <ind:filename operation="pattern match">^.*\.conf$</ind:filename>
    <ind:pattern operation="pattern match">^\s*options\s+ipv6\s+.*disable=1.*$</ind:pattern>
    <ind:instance datatype="int">1</ind:instance>
  </ind:textfilecontent54_object>
</def-group>
