diff options
author | Florian Obser <florian@cvs.openbsd.org> | 2014-08-27 14:04:17 +0000 |
---|---|---|
committer | Florian Obser <florian@cvs.openbsd.org> | 2014-08-27 14:04:17 +0000 |
commit | a37c10a70e5b52eda69a999d38df285e81554e69 (patch) | |
tree | 725f796a2533b7d6612855b9390a900f027b57f9 /distrib | |
parent | e9646141ed76dc6df81a46a37d162cd4cd094752 (diff) |
Nuke net.inet6.icmp6.rediraccept and allow redirects on interfaces
with autoconf enabled.
If one is doing SLAAC one does already trust link local icmp6 so the
policy for icmp6 redirects should be the same.
pointed out by & OK bluhm@; OK henning@
Diffstat (limited to 'distrib')
-rw-r--r-- | distrib/miniroot/install.sh | 5 |
1 files changed, 1 insertions, 4 deletions
diff --git a/distrib/miniroot/install.sh b/distrib/miniroot/install.sh index bb8429f9cd0..8d126463ced 100644 --- a/distrib/miniroot/install.sh +++ b/distrib/miniroot/install.sh @@ -1,5 +1,5 @@ #!/bin/ksh -# $OpenBSD: install.sh,v 1.256 2014/08/10 16:32:28 rpe Exp $ +# $OpenBSD: install.sh,v 1.257 2014/08/27 14:04:15 florian Exp $ # $NetBSD: install.sh,v 1.5.2.8 1996/08/27 18:15:05 gwr Exp $ # # Copyright (c) 1997-2009 Todd Miller, Theo de Raadt, Ken Westerback @@ -309,8 +309,5 @@ fi print -r -- "$rootkey" >> /mnt/root/.ssh/authorized_keys ) -grep -qs '^rtsol' /mnt/etc/hostname.* && - echo 'net.inet6.icmp6.rediraccept=1 # 1=Accept IPv6 ICMP redirects (for hosts)' >>/mnt/etc/sysctl.conf - # Perform final steps common to both an install and an upgrade. finish_up |