Skip to content

Commit 5809137

Browse files
authored
Revert "secure_redirects should be set to 1 (default)" (#260)
This reverts commit dc96440.
1 parent 6cd9ae7 commit 5809137

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

manifests/sysctl.pp

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -155,8 +155,8 @@
155155
# Accepting redirects can lead to malicious networking behavior, so disable it if not needed.
156156
sysctl { 'net.ipv4.conf.all.accept_redirects': value => '0' }
157157
sysctl { 'net.ipv4.conf.default.accept_redirects': value => '0' }
158-
sysctl { 'net.ipv4.conf.all.secure_redirects': value => '1' }
159-
sysctl { 'net.ipv4.conf.default.secure_redirects': value => '1' }
158+
sysctl { 'net.ipv4.conf.all.secure_redirects': value => '0' }
159+
sysctl { 'net.ipv4.conf.default.secure_redirects': value => '0' }
160160
if $manage_ipv6 {
161161
sysctl { 'net.ipv6.conf.all.accept_redirects': value => '0' }
162162
sysctl { 'net.ipv6.conf.default.accept_redirects': value => '0' }

0 commit comments

Comments
 (0)