kernel: disable accept_ra by default

[openwrt/staging/luka.git] / package / base-files / files / etc / init.d / sysctl

diff --git a/package/base-files/files/etc/init.d/sysctl b/package/base-files/files/etc/init.d/sysctl
index 65e6aa99250d09a3ccd9d023cb8f8205be86eee8..a236a0194b665ff56c8330930bfd44709d1b0d3d 100755 (executable)
--- a/package/base-files/files/etc/init.d/sysctl
+++ b/package/base-files/files/etc/init.d/sysctl
@@ -26,11 +26,19 @@ apply_defaults() {
                net.ipv6.ip6frag_high_thresh="$frag_high_thresh" \
                net.netfilter.nf_conntrack_frag6_low_thresh="$frag_low_thresh" \
                net.netfilter.nf_conntrack_frag6_high_thresh="$frag_high_thresh"
+
+       # first set default, then all interfaces to avoid races with appearing interfaces
+       if [ -d /proc/sys/net/ipv6/conf ]; then
+               echo 0 > /proc/sys/net/ipv6/conf/default/accept_ra
+               for iface in /proc/sys/net/ipv6/conf/*/accept_ra; do
+                       echo 0 > "$iface"
+               done
+       fi
 }
 
 start() {
        apply_defaults
-       for CONF in /etc/sysctl.conf /etc/sysctl.d/*.conf; do
+       for CONF in /etc/sysctl.d/*.conf /etc/sysctl.conf; do
                [ -f "$CONF" ] && sysctl -p "$CONF" -e >&-
        done
 }