On 6/17/19 3:22 AM, Shengjing Zhu wrote: > Control: severity -1 normal > > On Tue, Jun 11, 2019 at 6:09 PM Shengjing Zhu <z...@debian.org> wrote: >> Hi, >> >> I checked more carefully on https://github.com/moby/moby/pull/28257 >> and https://github.com/moby/moby/issues/14041 >> Then I concluded that docker does nothing wrong in this case. >> > [...] > > With the reason I explained last week, I would downgrade this issue. > > Arnaud, > when you upload new version for the CVE issue, could you amend the > README.Debian to tell people that if they don't want docker to set > default FORWARD policy to DROP, they should enable ip_forward > intentionally. (I bet your english is better than me to draft a > phrase...) > Hi,
I will, and can even go further and display an explicit message when user upgrade the package maybe? (I'm not sure how to do that but I'm sure I'll find an example easily). I'm quite busy now but I hope I'll have time before the end of the week to do all of that. Thanks,
