sysctl updates

ConsultingMD · May 16, 2023 · f598232 · f598232
1 parent 22a2a70
commit f598232
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/scripts/cis-benchmark.sh b/scripts/cis-benchmark.sh
@@ -300,8 +300,10 @@ echo "2.2.4 - ensure LDAP client is not installed"
 yum_remove openldap-clients
 
 echo "3.1.1 - ensure IP forwarding is disabled"
-sysctl_entry "net.ipv4.ip_forward = 0"
-sysctl_entry "net.ipv6.conf.all.forwarding = 0"
+# Required for working container networking
+# sysctl_entry "net.ipv4.ip_forward = 0"
+# sysctl_entry "net.ipv4.conf.all.forwarding = 0"
+# sysctl_entry "net.ipv6.conf.all.forwarding = 0"
 
 echo "3.1.2 - ensure packet redirect sending is disabled"
 sysctl_entry "net.ipv4.conf.all.send_redirects = 0"