Add rule sysctl_net_ipv6_conf_all_forwarding to slmicro 5 stig profile

ComplianceAsCode · Aug 5, 2024 · bb96488 · bb96488
1 parent f3675c0
commit bb96488
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 3 deletions.
diff --git a/controls/stig_slmicro5.yml b/controls/stig_slmicro5.yml
@@ -536,8 +536,9 @@ controls:
       title:
           SLEM 5 must not be performing Internet Protocol version 6 (IPv6) packet forwarding
           unless the system is a router.
-      rules: []
-      status: pending
+      rules:
+          - sysctl_net_ipv6_conf_all_forwarding
+      status: automated
 
     - id: SLEM-05-254035
       levels:

diff --git a/...system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_forwarding/rule.yml b/...system/network/network-ipv6/configuring_ipv6/sysctl_net_ipv6_conf_all_forwarding/rule.yml
@@ -18,6 +18,7 @@ identifiers:
     cce@rhel10: CCE-86882-8
     cce@sle12: CCE-83247-7
     cce@sle15: CCE-85713-6
+    cce@slmicro5: CCE-93640-1
 
 references:
     cis-csc: 1,11,12,13,14,15,16,2,3,7,8,9

diff --git a/shared/references/cce-slmicro5-avail.txt b/shared/references/cce-slmicro5-avail.txt
@@ -1,4 +1,3 @@
-CCE-93640-1
 CCE-93641-9
 CCE-93651-8
 CCE-93652-6