----- Original Message -----
From: "Moez Roy" <moez.roy(a)gmail.com>
To: "Development discussions related to Fedora"
<devel(a)lists.fedoraproject.org>, "Pavel Simerda"
<psimerda(a)redhat.com>
Cc: "Tore Anderson" <tore(a)fud.no>, "Tomas Hozza"
<thozza(a)redhat.com>, "Paul Wouters" <pwouters(a)redhat.com>
Sent: Tuesday, November 3, 2015 6:50:53 PM
Subject: Re: Fedora IPv6 testing and improvements - request for ideas
Hi Pavel Simerda,
The IPv6 updates are breaking stuff (and probably increasing the
attack surface):
Hi Moez,
please could you explain the above statement and back it by specific
data for the tickets below?
Bug 1231946 - unbound-anchor ignores
net.ipv6.conf.all.disable_ipv6=1
in /etc/sysctl.conf
https://bugzilla.redhat.com/show_bug.cgi?id=1231946
It seems to suggest there was a regression due to an update
related to IPv6 but:
1) The ticket doesn't suggest a regression.
2) The ticket doesn't talk about any specific update.
3) I am not aware of any recent unbound update motivated by IPv6.
If you still think it is the case, please address the above points
in the bugzilla ticket.
Bug 1251762 - dnssec-triggerd ignores
net.ipv6.conf.all.disable_ipv6=1
in /etc/sysctl.conf
https://bugzilla.redhat.com/show_bug.cgi?id=1251762
This looks very similar in nature.
(maybe other software like avahi also don't remember right now)
You can reproduce this by putting "ipv6.disable=1" in the kernel command
line.
Thanks! It looks like we need to test a lot of stuff with IPv6 disabled in
the kernel.
Cheers,
Pavel