DHCPv6 client in base

Roy Marples roy at marples.name
Sat Oct 12 09:33:05 UTC 2019


On 12/10/2019 03:04, Hiroki Sato wrote:
>   I emphasize again here that people who want to use dhcpcd are still
>   able to install net/dhcpcd and override a combination of utilities
>   such as rtsold.  Ditto for ISC's IPv6-capable dhclient.  My opinion
>   about the import is that if we adopt dhcpcd in the base system, we
>   should replace all of the current dhclient for IPv4 and rtsold
>   together.  Of course we should consider it will need Capsicum or
>   privsep for sandboxing and involve a bigger impact for IPv4 users at
>   least.

I agree with what you say entirely - and I would imagine similar work 
would be needed for any DHCP6 client. I have no idea how privsep or 
Capsicum should work under dhcpcd (I have zero knowledge in these areas) 
and would welcome any discussion to move this forwards.

For privsep, would it be enough to open ports, drop privs, read the 
message, validate the message and then send it to the root process? Or 
is there something more expected?

Roy


More information about the freebsd-net mailing list