netdev - [PATCH] IPv6 configurable default value for the privacy extension flag

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Mon, 31 Jan 2011 16:49:45 +0100
From:	Julien Aubé <jul.aube@...il.com>
To:	netdev@...r.kernel.org
Subject: [PATCH] IPv6 configurable default value for the privacy extension
 flag

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

The following patch is a proposal only.

The goal is to "preset" the default value of the flag use_tempaddr for the all/ and conf/ configuration space. 

The reason why I did this patch is because frequently, I have a race between the interface coming up and the flag:
Usually, just setting the flag to 2 in /etc/sysctl.conf is not enough : At this moment of the boot, even if the interface has no
IPv4 yet, it may have already an IPv6, got by RA.

But if at this time the flag is 0, then the interface will keep the address derived from the Mac Address. Forever.
The only solution is to bring down the interface and bring it up again, manually. 

That's why I created this patch.
I'm not sure if this is the good implementation to do, or even if it is the right way to scratch my own itch, but it 
does work nevertheless.
I know the Privacy Extension is somewhat controversial, but anyway, I do prefer to have it on, for myself.

I'm willing to to listen to any comments and modify my patch accordingly. 

Thanks,

Julien Aubé - j.aube@...oste.net

- -- 
People in the embedded space don't do prototypes. They hack something until it works, then it's done.
- --- 
le reseau par terre, c'est d'la faute a renater
le nez dans le ruisseau, c'est la faute a cisco
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAk1G2hkACgkQHiz1mD2sU8irLACeM9ZBiQ+WSj2dVImyorRuwEVY
9UwAoJVp3w3Vp+9HRe6BRW59y/KrnDsr
=zlk3
-----END PGP SIGNATURE-----

View attachment "ipv6_privacy_default_setting.patch" of type "text/x-patch" (4525 bytes)