linux-kernel - Re: patch net-restore-ip-source-validation.patch added to 2.6.32-stable tree

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <201002041931.40493.s.L-H@gmx.de>
Date:	Thu, 4 Feb 2010 19:31:38 +0100
From:	"Stefan Lippers-Hollmann" <s.L-H@....de>
To:	hadi@...erus.ca
Cc:	gregkh@...e.de, linux-kernel@...r.kernel.org, davem@...emloft.net,
	stable@...nel.org
Subject: Re: patch net-restore-ip-source-validation.patch added to 2.6.32-stable tree

Hi

On Thursday 04 February 2010, jamal wrote:
> On Thu, 2010-02-04 at 18:50 +0100, Stefan Lippers-Hollmann wrote:
> > sysctl table check failed
> 
> Can you look at your patched source include/linux/sysctl.h
> and see whether you see the following lines:
> ----
>         NET_IPV4_CONF_ARP_ACCEPT=21,
>         NET_IPV4_CONF_ARP_NOTIFY=22,
>         NET_IPV4_CONF_ACCEPT_LOCAL=23,
>         NET_IPV4_CONF_SRC_VMARK=24,
>         __NET_IPV4_CONF_MAX
> ---
> 
> I have a feeling you are missing NET_IPV4_CONF_ACCEPT_LOCAL

Yes, you're 100% right - such a hunk is missing from queue-2.6.32 [1]

	http://git.kernel.org/?p=linux/kernel/git/stable/stable-queue.git;a=blob;f=queue-2.6.32/net-restore-ip-source-validation.patch;h=8cc634adad59c2f67626f853e0fcce5ca8f1d579;hb=HEAD

and from 2.6.32.8-rc1 [2]

	$ wget -qO- kernel.org/pub/linux/kernel/v2.6/stable-review/patch-2.6.32.8-rc1.gz | zgrep NET_IPV4_CONF_ACCEPT_LOCAL
	$

Regards
	Stefan Lippers-Hollmann

[1]	git://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git
[2]	[46/74] net: restore ip source validation, Message-Id: <20100204171514.263483751@...ux.site>
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/