This bug is awaiting verification that the kernel in -proposed solves
the problem. Please test the kernel and update this bug with the
results. If the problem is solved, change the tag 'verification-needed-
focal' to 'verification-done-focal'. If the problem still exists, change
the tag 'verification-needed-focal' to 'verification-failed-focal'.

If verification is not done by 5 working days from today, this fix will
be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how
to enable and use -proposed. Thank you!


** Tags added: verification-needed-focal

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1936475

Title:
  ipv6: fix 'disable_policy' for forwarded packets

Status in linux package in Ubuntu:
  Incomplete
Status in linux source package in Impish:
  Incomplete

Bug description:
  [Impact]

  The ipv6 sysctl entry 'disable_policy' has effect for local packets
  only (while the ipv4 version is for all packets coming from the
  specified interface).

  This is fixed upstream with commit ccd27f05ae7b ("ipv6: fix
  'disable_policy' for fwd packets").

  
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ccd27f05ae7b

  [Test Case]

  Enable 'disable_policy' for an interface:
  sysctl -w net.ipv6.conf.eth0.disable_policy=1
  Add an ipsec policy:
  ip xfrm policy add src fd00:100::/64 dst fd00:200::/64 dir out tmpl src 
fd00:125::1 dst fd00:125::2 proto esp mode tunnel

  Try a ping from subnet fd00:100::/64 to subnet fd00:200::/64.

  [Regression Potential]

  The patch is small and located in ip6_forward(), thus only this
  function is affected.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1936475/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to