Merge pull request #35 from jordiprats/master

settings ipv6
NTTCom-MS · May 29, 2019 · 383a2dc · 383a2dc
2 parents e933f9f + 40c363c
commit 383a2dc
Show file tree

Hide file tree

Showing 4 changed files with 22 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # CHANGELOG
 
+## 0.3.6
+
+* added **IPv6** settings:
+ - ipv6_all_accept_redirects
+ - ipv6_default_accept_redirects
+ - ipv6_conf_all_accept_ra
+ - ipv6_conf_default_accept_ra
+
 ## 0.3.5
 
 * added support for SLES 11.4

diff --git a/manifests/init.pp b/manifests/init.pp
@@ -36,6 +36,10 @@
               $ipv4_default_secure_redirects          = false,
               $ipv4_all_send_redirects                = false,
               $ipv4_default_send_redirects            = false,
+              $ipv6_all_accept_redirects              = false,
+              $ipv6_default_accept_redirects          = false,
+              $ipv6_conf_all_accept_ra                = undef,
+              $ipv6_conf_default_accept_ra            = undef,
             ) inherits sysctl::params {
 
   Exec{

diff --git a/metadata.json b/metadata.json
@@ -1,6 +1,6 @@
 {
   "name": "eyp-sysctl",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "author": "eyp",
   "summary": "configure and manage sysctl",
   "license": "Apache-2.0",

diff --git a/templates/sysctlbase.erb b/templates/sysctlbase.erb
@@ -52,6 +52,15 @@ net.ipv4.conf.default.secure_redirects = <%= scope.function_bool2number([@ipv4_d
 net.ipv4.conf.all.send_redirects = <%= scope.function_bool2number([@ipv4_all_send_redirects]) %>
 net.ipv4.conf.default.send_redirects = <%= scope.function_bool2number([@ipv4_default_send_redirects]) %>
 
+# ipv6
+net.ipv6.conf.all.accept_redirects = <%= scope.function_bool2number([@ipv6_all_accept_redirects]) %>
+net.ipv6.conf.default.accept_redirects = <%= scope.function_bool2number([@ipv6_default_accept_redirects]) %>
+<% if defined?(@ipv6_conf_all_accept_ra) -%>
+net.ipv6.conf.all.accept_ra = <%= @ipv6_conf_all_accept_ra %>
+<% end -%>
+<% if defined?(@ipv6_conf_default_accept_ra) -%>
+net.ipv6.conf.default.accept_ra = <%= @ipv6_conf_default_accept_ra %>
+<% end -%>
 # Restrict core dumps
 fs.suid_dumpable = <%= scope.function_bool2number([@suid_dumpable]) %>