netdev - Re: ipv4 05/05: add sysctl to accept packets with local source addresses

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 03 Dec 2009 23:52:56 -0800
From:	ebiederm@...ssion.com (Eric W. Biederman)
To:	Patrick McHardy <kaber@...sh.net>
Cc:	davem@...emloft.net, netdev@...r.kernel.org
Subject: Re: ipv4 05/05: add sysctl to accept packets with local source addresses

Patrick McHardy <kaber@...sh.net> writes:

> commit 8ec1e0ebe26087bfc5c0394ada5feb5758014fc8
> Author: Patrick McHardy <kaber@...sh.net>
> Date:   Thu Dec 3 12:16:35 2009 +0100
>
>     ipv4: add sysctl to accept packets with local source addresses
>     
>     Change fib_validate_source() to accept packets with a local source address when
>     the "accept_local" sysctl is set for the incoming inet device. Combined with the
>     previous patches, this allows to communicate between multiple local interfaces
>     over the wire.
>     
>     Signed-off-by: Patrick McHardy <kaber@...sh.net>
>

Obligatory grumble. New binary sysctl.  Grumble.

Honestly this might be the one new sysctl that doesn't conflict with
my sysctl tree.  That should merge to Linus sometime this merge cycle
which will stop exporting this to userspace. So I don't have any
real complaints.  Grumble.

This overloading of sysctl.h for the binary sysctl numbers and
the index into the perdevice sysctls is something we should probably
change at some point to keep maintenance a little less confusing.

Eric

> diff --git a/include/linux/sysctl.h b/include/linux/sysctl.h
> index 1e4743e..9f047d7 100644
> --- a/include/linux/sysctl.h
> +++ b/include/linux/sysctl.h
> @@ -490,6 +490,7 @@ enum
>  	NET_IPV4_CONF_PROMOTE_SECONDARIES=20,
>  	NET_IPV4_CONF_ARP_ACCEPT=21,
>  	NET_IPV4_CONF_ARP_NOTIFY=22,
> +	NET_IPV4_CONF_ACCEPT_LOCAL=23,
>  	__NET_IPV4_CONF_MAX
>  };
>  
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html