This commit adds a new sysctl accept_ra_rt_info_min_plen that defines the minimum acceptable prefix length of Route Information Options. The new sysctl is intended to be used together with accept_ra_rt_info_max_plen to configure a range of acceptable prefix lengths. It is useful to prevent misconfigurations from unintentionally blackholing too much of the IPv6 address space (e.g., home routers announcing RIOs for fc00::/7, which is incorrect).
Showing the changes to include/uapi/linux (2 of 6 files). Show all
Unified · Split
| @@ -184,6 +184,7 @@ enum { · 183 unmodified lines | ||
| 184 | 184 | DEVCONF_ENHANCED_DAD, |
| 185 | 185 | DEVCONF_ADDR_GEN_MODE, |
| 186 | 186 | DEVCONF_DISABLE_POLICY, |
| 187 | + DEVCONF_ACCEPT_RA_RT_INFO_MIN_PLEN, | |
| 187 | 188 | DEVCONF_MAX |
| 188 | 189 | }; |
| 189 | 190 | |
| @@ -568,6 +568,7 @@ enum { · 567 unmodified lines | ||
| 568 | 568 | NET_IPV6_PROXY_NDP=23, |
| 569 | 569 | NET_IPV6_ACCEPT_SOURCE_ROUTE=25, |
| 570 | 570 | NET_IPV6_ACCEPT_RA_FROM_LOCAL=26, |
| 571 | + NET_IPV6_ACCEPT_RA_RT_INFO_MIN_PLEN=27, | |
| 571 | 572 | __NET_IPV6_MAX |
| 572 | 573 | }; |
| 573 | 574 | |