Feature: cisSysctl
Description
A sub-feature of cis that configures sysctl settings per CIS benchmark requirements. Must be used with the cis feature.
What it does
Disables IPv6 entirely. Disables IPv4 forwarding and redirects. Applies these settings via a sysctl drop-in at /etc/sysctl.d/99-cis.conf.
Files
Files present in this feature and their purpose. See the feature file reference for the semantics of each file type.
| File | Purpose |
|---|---|
file.include.markers.yaml (ref) | Maps files to test-coverage marker IDs. |
info.yaml (ref) | Declares type: element and included/excluded features. |
file.include/etc/sysctl.d/99-cis.conf (file.include) | Sets sysctl parameters per CIS benchmarks: disables IPv6, IPv4 forwarding, and IPv4 redirects. |
Related features
This feature has no include or exclude relationships.