Re: [PATCH] IPv6: optionaly validate RAs on raw sockets

[Vlad Yasevich <vladislav.yasevich@hp.com>]

Rémi Denis-Courmont wrote:
> Le mercredi 11 juillet 2007, David Stevens a écrit :
>>         That sounds like a good idea to me (FWIW),
>> though I also still think a simple raw-socket
>> application would do it just fine, possibly with
>> no kernel modification at all.
>>         But since the kernel wouldn't be maintaining
>> the DNS info, which was my real objection to the
>> original version,  netlink would work well too.
> 
> One remaining corner case is NFS/IPv6 root, whereby userland won't have 
> a chance to start before the network, and hence may miss the solicited 
> RA. Or would it? By default, the next unsolicited RA can be anytime 
> from now to after 10 minutes, so that's not sufficient. I wouldn't 
> personnaly care, but...
> 

You've got the same issue with the socket option approach.

-vlad