From 2ce834f6f7fa1d6662b45116dcf12ab5f1888fbf Mon Sep 17 00:00:00 2001
From: Florian La Roche <laroche@redhat.com>
Date: Thu, 7 Oct 2004 11:39:38 +0000
Subject: - disallow source routed packets by default

---
 sysctl.conf.s390 | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'sysctl.conf.s390')

diff --git a/sysctl.conf.s390 b/sysctl.conf.s390
index ef22e8bb..0ddc1d55 100644
--- a/sysctl.conf.s390
+++ b/sysctl.conf.s390
@@ -9,6 +9,9 @@ net.ipv4.ip_forward = 0
 # Controls source route verification
 net.ipv4.conf.default.rp_filter = 1
 
+# Do not accept source routing
+net.ipv4.conf.default.accept_source_route = 0
+
 # Controls whether core dumps will append the PID to the core filename.
 # Useful for debugging multi-threaded applications.
 kernel.core_uses_pid = 1
-- 
cgit v1.2.1