On Thu, Jan 15, 2009 at 9:35 AM, Mike McGrath <mmcgrath(a)redhat.com> wrote:
On Sun, 11 Jan 2009, Mike McGrath wrote:
> This isn't really required but it's my intention to implement these
> policies (or what we come to after some discussion). This is targeted
> _ONLY_ at this team and those with shell access to our servers. Its not
> my intention to roll it out to the larger community, though its certainly
> a good idea for people to read through it.
>
>
http://mmcgrath.fedorapeople.org/policy/
>
Mike,
Take a look at Section 1.2. Host Network Security. There is a
duplicate setting.
The 4th setting is:
net.ipv4.conf.all.accept_redirects = 0
This setting is duplicated in the 14th setting.
I'm guessing that the 4th setting should be removed.
Frank