375 B
375 B
---id: V-38524 status: opt-in tag: kernel ---
The STIG requires that ICMPv4 redirects are disabled on the host. However, this can cause problems with LXC-based deployments, such as environments deployed with OpenStack-Ansible.
Deployers can opt-in for this change by setting the following Ansible variable:
security_disable_icmpv4_redirects: yes