netdev - Re: [PATCH] IPv6: optionaly validate RAs on raw sockets

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <Line.LNX.4.64.0707111715510.26078@d.namei>
Date:	Wed, 11 Jul 2007 17:17:13 -0400 (EDT)
From:	James Morris <jmorris@...ei.org>
To:	David Miller <davem@...emloft.net>
cc:	rdenis@...phalempin.com, dlstevens@...ibm.com,
	vladislav.yasevich@...com, netdev@...r.kernel.org,
	yoshfuji@...ux-ipv6.org
Subject: Re: [PATCH] IPv6: optionaly validate RAs on raw sockets

On Wed, 11 Jul 2007, David Miller wrote:

> > One remaining corner case is NFS/IPv6 root, whereby userland won't have 
> > a chance to start before the network, and hence may miss the solicited 
> > RA. Or would it? By default, the next unsolicited RA can be anytime 
> > from now to after 10 minutes, so that's not sufficient. I wouldn't 
> > personnaly care, but...
> 
> We already have cases like that with network device firmware that
> has to be loaded in from the filesystem in userspace, and the
> answer is to use a properly populated initrd.
> 
> Same goes for things like this.
> 
> That's the fact of life these days, like it or not.

Same story for NFS root when using strong authentication -- something has 
to be running in userland to manage that.



- James
-- 
James Morris
<jmorris@...ei.org>
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html