netdev - Re: [PATCH net-next v5] net: ipv6: Make address flushing on ifdown optional

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 14 Oct 2015 05:18:14 -0700 (PDT)
From:	David Miller <davem@...emloft.net>
To:	hannes@...essinduktion.org
Cc:	nicolas.dichtel@...nd.com, dsa@...ulusnetworks.com,
	netdev@...r.kernel.org, hannes@...hat.com
Subject: Re: [PATCH net-next v5] net: ipv6: Make address flushing on ifdown
 optional

From: Hannes Frederic Sowa <hannes@...essinduktion.org>
Date: Wed, 14 Oct 2015 13:03:41 +0200

> On Wed, Oct 14, 2015, at 12:08, Nicolas Dichtel wrote:
>> Le 14/10/2015 11:34, Hannes Frederic Sowa a écrit :
>> [sni]
>> > This sysctl is on my list to be enabled soon by default by any systemd
>> > based distribution. For that reason, could you maybe remove all the
>> I'm not sure to understand why we add a sysctl then. Or at least, why the
>> linux
>> default value is different from all standard distrib. I will be like
>> rp_filter :/
> 
> The difference is that people upgrade (in case of fedora they get a
> .rpmnew file) or install a distribution and don't wonder or have
> assumptions about old behavior. In case companies integrate kernel in
> products/appliances without a way to manage those sysctls we cannot
> simply change them as this would break assumptions for them. I think
> those are two different cases.

The thing that is similar is that people set rp_filter inappropriately
(no end host should have that knob enabled, ever, it's totally
unnecesary).  And the risk here is similar, distribution X will set it
so Y will say "we probably should set it too even though we really
don't understand it fully".

I really hate situations like this.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html