kernel: disable accept_ra by default

Our commands setting accept_ra to 0 on all interfaces got lost in the
transition to procd. This remained unnoticed for a long time, as we also
enable forwarding on all interfaces, which prevents RA handling by default.

Restore the commands, while also fixing a possible race condition in the
old version.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

diff --git a/package/base-files/Makefile b/package/base-files/Makefile
index 45a1f4cc815fdd0eaec34bf38be914bd10159e6a..7fe8642ff52a7d1ebf12d132a3f78d5f5038fef3 100644 (file)
--- a/package/base-files/Makefile
+++ b/package/base-files/Makefile
@@ -12,7 +12,7 @@ include $(INCLUDE_DIR)/version.mk
 include $(INCLUDE_DIR)/feeds.mk
 
 PKG_NAME:=base-files
-PKG_RELEASE:=189
+PKG_RELEASE:=190
 PKG_FLAGS:=nonshared
 
 PKG_FILE_DEPENDS:=$(PLATFORM_DIR)/ $(GENERIC_PLATFORM_DIR)/base-files/

diff --git a/package/base-files/files/etc/init.d/sysctl b/package/base-files/files/etc/init.d/sysctl
index 8722126a6612d67a3f615166a7fbec146207e97f..a236a0194b665ff56c8330930bfd44709d1b0d3d 100755 (executable)
--- a/package/base-files/files/etc/init.d/sysctl
+++ b/package/base-files/files/etc/init.d/sysctl
@@ -26,6 +26,14 @@ apply_defaults() {
                net.ipv6.ip6frag_high_thresh="$frag_high_thresh" \
                net.netfilter.nf_conntrack_frag6_low_thresh="$frag_low_thresh" \
                net.netfilter.nf_conntrack_frag6_high_thresh="$frag_high_thresh"
+
+       # first set default, then all interfaces to avoid races with appearing interfaces
+       if [ -d /proc/sys/net/ipv6/conf ]; then
+               echo 0 > /proc/sys/net/ipv6/conf/default/accept_ra
+               for iface in /proc/sys/net/ipv6/conf/*/accept_ra; do
+                       echo 0 > "$iface"
+               done
+       fi
 }
 
 start() {