Detections
Analytics
OL07-00-040660 - The Oracle Linux operating system must not send Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirects.
Information
ICMP redirect messages are used by routers to inform hosts that a more direct route exists for a particular destination. These messages contain information from the system's route table, possibly revealing portions of the network topology.Solution
Configure the system not to allow interfaces to perform IPv4 ICMP redirects.Set the system to the required kernel parameter by adding the following line to '/etc/sysctl.conf' or a configuration file in the /etc/sysctl.d/ directory (or modify the line to have the required value):
net.ipv4.conf.all.send_redirects = 0
Issue the following command to make the changes take effect:
# sysctl --system
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_7_V3R5_STIG.zip
Item Details
Audit Name: DISA Oracle Linux 7 STIG v3r5
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-221881r991589_rule, STIG-ID|OL07-00-040660, STIG-Legacy|SV-108605, STIG-Legacy|V-99501, Vuln-ID|V-221881
Plugin: Unix
Control ID: 9d038e6bc90bb981fb6dae28bb5488c244adbeae0a368d8f7dbc2387c3d20372