Skip to content

Conversation

@flokli
Copy link
Contributor

@flokli flokli commented Dec 23, 2020

When set to "kernel", systemd is not supposed to touch that sysctl.

5e0534f, part of #17240 forgot to handle that case.

Fixes #18003

cc @keszybz @yuwata

IPv6 privacy extensions are plural, not singular.
@flokli
Copy link
Contributor Author

flokli commented Dec 23, 2020

I verified this by running the NixOS networkd privacy test (nix-build -A nixosTests.networking.networkd.privacy) on a version of nixpkgs that had d349582c0769aa4b9c48e7921e5510072dd37c74 reverted and this patch applied.

When set to "kernel", systemd is not supposed to touch that sysctl.

5e0534f, part of
systemd#17240 forgot to handle that
case.

Fixes systemd#18003
@yuwata yuwata force-pushed the ipv6-privacy-extensions-kernel branch from 175ce3f to d3ccb1b Compare December 23, 2020 23:54
@yuwata
Copy link
Member

yuwata commented Dec 23, 2020

Thanks. I fixed the reference to the commit 5e0534f in the message of the second commit.

@yuwata yuwata merged commit bc1a4d2 into systemd:master Dec 23, 2020
@flokli flokli deleted the ipv6-privacy-extensions-kernel branch December 24, 2020 23:49
@flokli
Copy link
Contributor Author

flokli commented Dec 24, 2020

Thanks. It'd be nice if this could get backported to 247.x.

@flokli
Copy link
Contributor Author

flokli commented Jan 3, 2021

poke @keszybz - can this be cherry-picked for 247.3?

@WhoNeedszZz
Copy link

A month of people unknowingly exposing a non-private ipv6 address. What could possibly go wrong?

@yuwata
Copy link
Member

yuwata commented Jan 20, 2021

Backport PR is created: systemd/systemd-stable#86

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Development

Successfully merging this pull request may close these issues.

networkd: IPv6PrivacyExtensions=kernel doesn't honor kernel setting

3 participants