Package: procps Version: 1:3.2.7-6 Severity: normal Tags: ipv6 patch /etc/sysctl.conf contains templates for setting net.ipv4.conf.all.accept_redirects and net.ipv4.conf.all.accept_source_route but lacks the corresponding settings for IPv6. The attached patch fixes that.
elmar -- System Information: Debian Release: lenny/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.6.24 (SMP w/2 CPU cores; PREEMPT) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages procps depends on: ii libc6 2.7-10 GNU C Library: Shared libraries ii libncurses5 5.6+20080308-1 Shared libraries for terminal hand ii lsb-base 3.2-5 Linux Standard Base 3.2 init scrip Versions of packages procps recommends: ii psmisc 22.6-1 Utilities that use the proc filesy -- no debconf information -- .'"`. /"\ | :' : Elmar Hoffmann <[EMAIL PROTECTED]> ASCII Ribbon Campaign \ / `. `' GPG key available via pgp.net against HTML email X `- & vCards / \
--- sysctl.conf.orig 2008-04-05 15:53:27.000000000 +0200 +++ sysctl.conf 2008-04-05 16:59:39.000000000 +0200 @@ -44,6 +44,7 @@ # # Do not accept ICMP redirects (prevent MITM attacks) #net.ipv4.conf.all.accept_redirects = 0 +#net.ipv6.conf.all.accept_redirects = 0 # _or_ # Accept ICMP redirects only for gateways listed in our default # gateway list (enabled by default) @@ -54,6 +55,7 @@ # # Do not accept IP source route packets (we are not a router) #net.ipv4.conf.all.accept_source_route = 0 +#net.ipv6.conf.all.accept_source_route = 0 # # Log Martian Packets #net.ipv4.conf.all.log_martians = 1
signature.asc
Description: Digital signature
