----- Original Message ----- > From: "Moez Roy" <moez.roy@xxxxxxxxx> > To: "Development discussions related to Fedora" <devel@xxxxxxxxxxxxxxxxxxxxxxx>, "Pavel Simerda" > <psimerda@xxxxxxxxxx> > Cc: "Tore Anderson" <tore@xxxxxx>, "Tomas Hozza" <thozza@xxxxxxxxxx>, "Paul Wouters" <pwouters@xxxxxxxxxx> > Sent: Tuesday, November 3, 2015 6:50:53 PM > Subject: Re: Fedora IPv6 testing and improvements - request for ideas > > Hi Pavel Simerda, > > The IPv6 updates are breaking stuff (and probably increasing the > attack surface): Hi Moez, please could you explain the above statement and back it by specific data for the tickets below? > Bug 1231946 - unbound-anchor ignores net.ipv6.conf.all.disable_ipv6=1 > in /etc/sysctl.conf > https://bugzilla.redhat.com/show_bug.cgi?id=1231946 It seems to suggest there was a regression due to an update related to IPv6 but: 1) The ticket doesn't suggest a regression. 2) The ticket doesn't talk about any specific update. 3) I am not aware of any recent unbound update motivated by IPv6. If you still think it is the case, please address the above points in the bugzilla ticket. > Bug 1251762 - dnssec-triggerd ignores net.ipv6.conf.all.disable_ipv6=1 > in /etc/sysctl.conf > https://bugzilla.redhat.com/show_bug.cgi?id=1251762 This looks very similar in nature. > (maybe other software like avahi also don't remember right now) > > You can reproduce this by putting "ipv6.disable=1" in the kernel command > line. Thanks! It looks like we need to test a lot of stuff with IPv6 disabled in the kernel. Cheers, Pavel -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
