lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date:	Mon, 31 Jan 2011 16:49:45 +0100
From:	Julien Aubé <jul.aube@...il.com>
To:	netdev@...r.kernel.org
Subject: [PATCH] IPv6 configurable default value for the privacy extension
 flag

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

The following patch is a proposal only.

The goal is to "preset" the default value of the flag use_tempaddr for the all/ and conf/ configuration space. 

The reason why I did this patch is because frequently, I have a race between the interface coming up and the flag:
Usually, just setting the flag to 2 in /etc/sysctl.conf is not enough : At this moment of the boot, even if the interface has no
IPv4 yet, it may have already an IPv6, got by RA.

But if at this time the flag is 0, then the interface will keep the address derived from the Mac Address. Forever.
The only solution is to bring down the interface and bring it up again, manually. 

That's why I created this patch.
I'm not sure if this is the good implementation to do, or even if it is the right way to scratch my own itch, but it 
does work nevertheless.
I know the Privacy Extension is somewhat controversial, but anyway, I do prefer to have it on, for myself.

I'm willing to to listen to any comments and modify my patch accordingly. 

Thanks,

Julien Aubé - j.aube@...oste.net

- -- 
People in the embedded space don't do prototypes. They hack something until it works, then it's done.
- --- 
le reseau par terre, c'est d'la faute a renater
le nez dans le ruisseau, c'est la faute a cisco
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAk1G2hkACgkQHiz1mD2sU8irLACeM9ZBiQ+WSj2dVImyorRuwEVY
9UwAoJVp3w3Vp+9HRe6BRW59y/KrnDsr
=zlk3
-----END PGP SIGNATURE-----

View attachment "ipv6_privacy_default_setting.patch" of type "text/x-patch" (4525 bytes)

Powered by blists - more mailing lists