diff --git a/CHANGELOG.md b/CHANGELOG.md index 72f2e86..27c2ea9 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,13 @@ # CHANGELOG +## 0.3.6 + +* added **IPv6** settings: + - ipv6_all_accept_redirects + - ipv6_default_accept_redirects + - ipv6_conf_all_accept_ra + - ipv6_conf_default_accept_ra + ## 0.3.5 * added support for SLES 11.4 diff --git a/manifests/init.pp b/manifests/init.pp index 1e9d3a7..6f1af1c 100644 --- a/manifests/init.pp +++ b/manifests/init.pp @@ -36,6 +36,10 @@ $ipv4_default_secure_redirects = false, $ipv4_all_send_redirects = false, $ipv4_default_send_redirects = false, + $ipv6_all_accept_redirects = false, + $ipv6_default_accept_redirects = false, + $ipv6_conf_all_accept_ra = undef, + $ipv6_conf_default_accept_ra = undef, ) inherits sysctl::params { Exec{ diff --git a/metadata.json b/metadata.json index bc0431e..c2ef5db 100644 --- a/metadata.json +++ b/metadata.json @@ -1,6 +1,6 @@ { "name": "eyp-sysctl", - "version": "0.3.5", + "version": "0.3.6", "author": "eyp", "summary": "configure and manage sysctl", "license": "Apache-2.0", diff --git a/templates/sysctlbase.erb b/templates/sysctlbase.erb index 2374dfb..a33e466 100644 --- a/templates/sysctlbase.erb +++ b/templates/sysctlbase.erb @@ -52,6 +52,15 @@ net.ipv4.conf.default.secure_redirects = <%= scope.function_bool2number([@ipv4_d net.ipv4.conf.all.send_redirects = <%= scope.function_bool2number([@ipv4_all_send_redirects]) %> net.ipv4.conf.default.send_redirects = <%= scope.function_bool2number([@ipv4_default_send_redirects]) %> +# ipv6 +net.ipv6.conf.all.accept_redirects = <%= scope.function_bool2number([@ipv6_all_accept_redirects]) %> +net.ipv6.conf.default.accept_redirects = <%= scope.function_bool2number([@ipv6_default_accept_redirects]) %> +<% if defined?(@ipv6_conf_all_accept_ra) -%> +net.ipv6.conf.all.accept_ra = <%= @ipv6_conf_all_accept_ra %> +<% end -%> +<% if defined?(@ipv6_conf_default_accept_ra) -%> +net.ipv6.conf.default.accept_ra = <%= @ipv6_conf_default_accept_ra %> +<% end -%> # Restrict core dumps fs.suid_dumpable = <%= scope.function_bool2number([@suid_dumpable]) %>