Re: [PATCH 6/6] net: Warn when processes listen on AF_INET sockets
Jakub Kicinski <[email protected]>
| Newsgroups | gmane.linux.network.bridge |
|---|---|
| Message-ID | <20260401172010.6734453e__24634.4590139174$1775089339$gmane$org@kernel.org> |
On Wed, 1 Apr 2026 08:06:57 -0700 Stephen Hemminger wrote: > On Wed, 01 Apr 2026 10:28:23 +0100 > David Woodhouse <[email protected]> wrote: > > > > Some kernels are built without CONFIG_IPV6, so this warning would be > > > quite misleading. > > > > Maybe on this date next year, we could make it not possible to build > > the kernel *without* IPv6... ? > > There are some government agencies that used to require that IPV6 was disabled > for security reasons. Yes they had broken old firewalls Which is why we sadly have to keep the ipv6_mod_enabled() sillilitude around. But that's a runtime thing.