Re: [PATCH net-next v1 1/1] net: bridge: ensure that link-local traffic cannot unlock a locked port

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Ido Schimmel <idosch@xxxxxxxxxx>
Subject: Re: [PATCH net-next v1 1/1] net: bridge: ensure that link-local traffic cannot unlock a locked port
From: Hans Schultz <hans@xxxxxxxxxxxxxxxxxxxx>
Date: Thu, 30 Jun 2022 14:54:47 +0200
Cc: Ivan Vecera <ivecera@xxxxxxxxxx>, Andrew Lunn <andrew@xxxxxxx>, Florian Fainelli <f.fainelli@xxxxxxxxx>, Jiri Pirko <jiri@xxxxxxxxxxx>, Daniel Borkmann <daniel@xxxxxxxxxxxxx>, netdev@xxxxxxxxxxxxxxx, Nikolay Aleksandrov <razor@xxxxxxxxxxxxx>, bridge@xxxxxxxxxxxxxxxxxxxxxxxxxx, Hans Schultz <schultz.hans+netdev@xxxxxxxxx>, Vivien Didelot <vivien.didelot@xxxxxxxxx>, Eric Dumazet <edumazet@xxxxxxxxxx>, Paolo Abeni <pabeni@xxxxxxxxxx>, linux-kselftest@xxxxxxxxxxxxxxx, Roopa Prabhu <roopa@xxxxxxxxxx>, kuba@xxxxxxxxxx, Vladimir Oltean <olteanv@xxxxxxxxx>, Shuah Khan <shuah@xxxxxxxxxx>, davem@xxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx
In-reply-to: <Yr2LFI1dx6Oc7QBo@shredder>
References: <20220630111634.610320-1-hans@kapio-technology.com> <Yr2LFI1dx6Oc7QBo@shredder>

On Thu, Jun 30, 2022 at 14:37, Ido Schimmel <idosch@xxxxxxxxxx> wrote:
> On Thu, Jun 30, 2022 at 01:16:34PM +0200, Hans Schultz wrote:
>
> Why not just teach hostapd to do:
>
> echo 1 > /sys/class/net/br0/bridge/no_linklocal_learn
>
> ?

Ahh yes, link local vs mc. If that covers all (as it seems to) that
should be sufficient.

References:
- [PATCH net-next v1 1/1] net: bridge: ensure that link-local traffic cannot unlock a locked port
  - From: Hans Schultz
- Re: [PATCH net-next v1 1/1] net: bridge: ensure that link-local traffic cannot unlock a locked port
  - From: Ido Schimmel via Bridge

Prev by Date: [PATCH net-next v1 1/1] net: bridge: ensure that multicast packets cannot unlock a locked port
Next by Date: [PATCH net-next 1/1] net: dsa: mv88e6xxx: allow reading FID when handling ATU violations
Previous by thread: Re: [PATCH net-next v1 1/1] net: bridge: ensure that link-local traffic cannot unlock a locked port
Next by thread: [PATCH net-next v1 0/1] enable locked port feature with learning
Index(es):
- Date
- Thread

[Index of Archives] [Netdev] [AoE Tools] [Linux Wireless] [Kernel Newbies] [Security] [Linux for Hams] [Netfilter] [Bugtraq] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux RAID] [Linux Admin] [Samba] [Video 4 Linux]