Bug 1247728

Summary:	Fix limitation in iproute/ss regarding dual-stack sockets
Product:	Red Hat Enterprise Linux 6	Reporter:	Phil Sutter <psutter>
Component:	iproute	Assignee:	Phil Sutter <psutter>
Status:	CLOSED WONTFIX	QA Contact:	BaseOS QE Security Team <qe-baseos-security>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	6.8	CC:	kzhang, psimerda, qe-baseos-security, rkhan
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:	1247315	Environment:
Last Closed:	2015-10-23 21:44:12 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1247726
Bug Blocks:

Description Phil Sutter 2015-07-28 17:05:03 UTC

+++ This bug was initially created as a clone of Bug #1247315 +++

When listing listening sockets using 'ss -nlpe', there is no indication about whether an AF_INET6 socket is dual-stack capable, i.e. allows access from IPv4 as well. The following upstream patch solves this issue:

commit f32dc7467fee0b9e55c3fc6e2895d62e881dec55
Author: Phil Sutter <phil>
Date:   Wed Jun 24 13:07:20 2015 +0200

    ss: print value of IPV6_V6ONLY socket option if set
    
    If available and set, print 'v6only:1' for AF_INET6 sockets upon request
    of extended information. For IPv6 sockets bound to in6addr_any, this is
    the only way to determine if they will also accept IPv4 requests or not.
    
    Signed-off-by: Phil Sutter <phil>

Comment 1 Phil Sutter 2015-07-28 17:19:46 UTC

*** Bug 1244824 has been marked as a duplicate of this bug. ***

Comment 2 Phil Sutter 2015-07-28 17:32:17 UTC

Been told rhel-6.7 won't work, so targeting this at rhel-6.8.

Comment 3 Rashid Khan 2015-10-23 21:44:12 UTC

Phil, as per your comments in the 6.8 spreadsheet
Too risky for 6.x 
Closing

If you disagree, please feel free to re-open