Ensure icmp redirects are always ignored
A side effect of disabling the ip forwarding sysconf on all interfaces is to re-enable the ICMP redirects sysconf on all interfaces. This patch ensures that ICMP redirects stays turned off when disabling ip forwarding in TetherController. Accepting ICMP redirects can allow an attacker to inject malicious routes into a host and it is therefore desirable to always reject them. Bug: 62387578 Bug: 77541904 Test: manual Change-Id: I1f9a950eebf2f65d047f33145feee40d3ab34bd9 (cherry picked from commit c4b3a0c6)
Loading
Please register or sign in to comment