This commit adds a new sysctl accept_ra_rt_info_min_plen that defines the minimum acceptable prefix length of Route Information Options. The new sysctl is intended to be used together with accept_ra_rt_info_max_plen to configure a range of acceptable prefix lengths. It is useful to prevent misconfigurations from unintentionally blackholing too much of the IPv6 address space (e.g., home routers announcing RIOs for fc00::/7, which is incorrect).
Showing the changes to include/uapi/linux (2 of 6 files). Show all
Unified · Split
| @@ -184,6 +184,7 @@ enum { · 183 unmodified lines | |||
| 184 | DEVCONF_ENHANCED_DAD, | 184 | DEVCONF_ENHANCED_DAD, |
| 185 | DEVCONF_ADDR_GEN_MODE, | 185 | DEVCONF_ADDR_GEN_MODE, |
| 186 | DEVCONF_DISABLE_POLICY, | 186 | DEVCONF_DISABLE_POLICY, |
| 187 | DEVCONF_ACCEPT_RA_RT_INFO_MIN_PLEN, | ||
| 187 | DEVCONF_MAX | 188 | DEVCONF_MAX |
| 188 | }; | 189 | }; |
| 189 | 190 | ||
| @@ -568,6 +568,7 @@ enum { · 567 unmodified lines | |||
| 568 | NET_IPV6_PROXY_NDP=23, | 568 | NET_IPV6_PROXY_NDP=23, |
| 569 | NET_IPV6_ACCEPT_SOURCE_ROUTE=25, | 569 | NET_IPV6_ACCEPT_SOURCE_ROUTE=25, |
| 570 | NET_IPV6_ACCEPT_RA_FROM_LOCAL=26, | 570 | NET_IPV6_ACCEPT_RA_FROM_LOCAL=26, |
| 571 | NET_IPV6_ACCEPT_RA_RT_INFO_MIN_PLEN=27, | ||
| 571 | __NET_IPV6_MAX | 572 | __NET_IPV6_MAX |
| 572 | }; | 573 | }; |
| 573 | 574 | ||