Review ip6tables related rules

[marcusburghardt]

Description of problem:

While investigating the #10896 it was noticed some issues with ip6tables related rules:

• set_ip6tables_default_rule
• set_ipv6_loopback_traffic

Here are some improvements opportunities:

• These rules should not be executed if IPv6 is not enabled in the system.
• their platforms should include ipv6[enabled]
• These rules should only be applicable if:
  • iptables package is present;
  • ntfables and firewalld services are not enabled;
  • ufw package is not present;
  • So, probably this should be the correct definition of platform:
    • package[iptables] and not package[ufw] and service_disabled[firewalld] and service_disabled[nftables]
• They don't have an OVAL but the one could be created to check the /etc/sysconfig/ip6tables file
  • The OVAL can't check run-time, but it should be fine to ensure the expected configuration.
• There is a SCE script for Ubuntu.
  • It could be renamed to shared.sh
  • and the header updated to platform = multi_platform_ubuntu

SCAP Security Guide Version:

0.1.69

Operating System Version:

All products where ip6tables is available.

Additional Information/Debugging Steps:

[Mab879]

@teacup-on-rockingchair Is this valid or can we close it?

[teacup-on-rockingchair]

@teacup-on-rockingchair Is this valid or can we close it?

Well the final solution from my perspective is still up for review see #11818

This PR was a bit unlucky 😎 , and thought it got some initial positive review, there was I guess not enough time to pass the process