Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 233521 - sys-kernel/gentoo-sources-2.6.25-r7 - CONFIG_IPV6_PRIVACY not working
Summary: sys-kernel/gentoo-sources-2.6.25-r7 - CONFIG_IPV6_PRIVACY not working
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Core system (show other bugs)
Hardware: x86 Linux
: High normal (vote)
Assignee: Gentoo Kernel Bug Wranglers and Kernel Maintainers
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-07-31 20:02 UTC by David Greenberg
Modified: 2008-08-16 10:16 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description David Greenberg 2008-07-31 20:02:26 UTC
I had a IPv6 Global address set:
inet6 addr: 2001:18e8:3:443:208:74ff:fe2c:xxxx/64 Scope:Global

I set CONFIG_IPV6_PRIVACY=y and rebooted into the new kernel.

My IP address didn't change and the MAC is still discoverable vis ipv6calc.

$ ipv6calc -i -m 2001:18e8:3:443:208:74ff:fe2c:xxxx
...
EUI48=00:08:74:2c:xx:xx


Reproducible: Always




Linux 2.6.25-gentoo-r7 #1 SMP Mon Jul 28 10:29:53 EDT 2008 i686 Intel(R) Pentium(R) 4 CPU 1.80GHz GenuineIntel GNU/Linux

Portage 2.1.4.4 (default/linux/x86/2008.0, gcc-4.1.2, glibc-2.6.1-r0, 2.6.25-gentoo-r7 i686)
=================================================================
System uname: 2.6.25-gentoo-r7 i686 Intel(R) Pentium(R) 4 CPU 1.80GHz
Timestamp of tree: Thu, 31 Jul 2008 06:45:01 +0000
app-shells/bash:     3.2_p33
dev-java/java-config: 1.3.7, 2.1.4
dev-lang/python:     2.4.4-r13
dev-python/pycrypto: 2.0.1-r6
sys-apps/baselayout: 1.12.11.1
sys-apps/sandbox:    1.2.18.1-r2
sys-devel/autoconf:  2.13, 2.61-r2
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.1
sys-devel/binutils:  2.18-r1
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   1.5.26
virtual/os-headers:  2.6.23-r3
ACCEPT_KEYWORDS="x86"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=i686 -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/revdep-rebuild /etc/terminfo /etc/udev/rules.d"
CXXFLAGS="-O2 -march=i686 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks metadata-transfer sandbox sfperms strict unmerge-orphans userfetch userpriv usersandbox"
GENTOO_MIRRORS="https://gentoo.ussg.indiana.edu/ http://gentoo.ussg.indiana.edu/"
LANG="en_US.UTF-8"
LDFLAGS="-Wl,-O1"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.namerica.gentoo.org/gentoo-portage/"
USE="3dfx 3dnow X alsa bindist bitmap-fonts bzip2 crypt dbus dlloader firefox ipv6 java jpeg kerberos mailwrapper ncurses nptl nptlonly opengl pam pic png readline sound sse ssl tcpd threads tiff trutype-fonts type1-fonts unicode userlocales x86 xorg xscreensaver xv zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="i810"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 1 Mike Pagano gentoo-dev 2008-08-01 19:41:46 UTC
Can you tell me the value of /proc/sys/net/ipv6/conf/all/use_tempaddr
Comment 2 David Greenberg 2008-08-01 19:48:12 UTC
(In reply to comment #1)
> Can you tell me the value of /proc/sys/net/ipv6/conf/all/use_tempaddr

# sysctl -A |grep use_tempaddr

net.ipv6.conf.all.use_tempaddr = 0
net.ipv6.conf.default.use_tempaddr = 0
net.ipv6.conf.lo.use_tempaddr = -1
net.ipv6.conf.eth0.use_tempaddr = 0
net.ipv6.conf.dummy0.use_tempaddr = 0
net.ipv6.conf.sit0.use_tempaddr = -1
Comment 3 Mike Pagano gentoo-dev 2008-08-01 20:04:57 UTC
Is the documentation on use_tempaddr relevant?


Documentation/networking/ip-sysctl.txt
Comment 4 David Greenberg 2008-08-01 20:14:22 UTC
(In reply to comment #3)
> Is the documentation on use_tempaddr relevant?
> Documentation/networking/ip-sysctl.txt

Yes.

use_tempaddr - INTEGER
        Preference for Privacy Extensions (RFC3041).
          <= 0 : disable Privacy Extensions
          == 1 : enable Privacy Extensions, but prefer public
                 addresses over temporary addresses.
          >  1 : enable Privacy Extensions and prefer temporary
                 addresses over public addresses.
        Default:  0 (for most devices)
                 -1 (for point-to-point devices and loopback devices)


Set:

# sysctl -A |grep use_tempaddr

net.ipv6.conf.all.use_tempaddr = 2
net.ipv6.conf.default.use_tempaddr = 2
net.ipv6.conf.lo.use_tempaddr = -1
net.ipv6.conf.eth0.use_tempaddr = 2
net.ipv6.conf.dummy0.use_tempaddr = 0
net.ipv6.conf.sit0.use_tempaddr = -1

Setting net.ipv6.conf.all.use_tempaddr wasn't enough.  Computer now how two IPv6 addresses set.  The one I mentioned above, and a new temporary address.
Comment 5 Mike Pagano gentoo-dev 2008-08-15 21:08:53 UTC
Would you be able to test with 2.6.26 and on failure, try a development kernel 2.6.27
Comment 6 David Greenberg 2008-08-15 23:36:28 UTC
(In reply to comment #5)
> Would you be able to test with 2.6.26 and on failure, try a development kernel
> 2.6.27

I could, but temp addresses started working with the options below set via sysctl.

net.ipv6.conf.all.use_tempaddr = 2
net.ipv6.conf.default.use_tempaddr = 2
net.ipv6.conf.eth0.use_tempaddr = 2

Enabling the option in the kernel + these settings enabled temporary, randon IP addresses.

The IPv6 address created based on the MAC address is still present, but it is no longer prefered for outgoing connections.  
Comment 7 Mike Pagano gentoo-dev 2008-08-16 10:16:11 UTC
workaround identified