Bug#1027773: setting sysctl net.ipv4.ping_group_range

[Luca Boccassi]

Control: tags -1 pending

On Tue, 03 Jan 2023 12:05:10 +0100 Luca Boccassi <bluca at debian.org>
wrote:
> On Tue, 3 Jan 2023 03:26:37 +0100 Marco d'Itri <md at Linux.IT> wrote:
> > On Jan 03, Adam Borowski <kilobyte at angband.pl> wrote:
> > 
> > > Debian's default sysctl settings should reside in procps (as it
> owns
> > > /sbin/sysctl and /etc/sysctl* settings) rather than some
unrelated
> > > package.
> > Nowadays systemd is a source of common sysctl settings among
> different 
> > distributions.
> 
> Shipping 50-default.conf sounds good to me, it has sensible defaults,
> and /etc/sysctl.conf(.d/*) takes precedence anyway if it contains any
> local redefinition:
> 
> https://salsa.debian.org/systemd-team/systemd/-/merge_requests/187

As mentioned on the MR< this issue of missing good default sysctls
keeps biting, so I intend to have it fixed for Trixie. Kernel team, if
you strongly prefer to have the kernel source package own it, that is
fine by me, but bear in mind it has to be installed in containers
(without linux-image) too by default, so it would have to be either an
existing or new package that is always installed everywhere that
systemd-sysctl is installed.
If you want to devise such a solution that is of course fine by me, but
please note that if one is not available as we get near the Trixie
freeze (say, September) I will merge this MR instead so that these bugs
can be fixed.

Salvatore, it might be worth considering bringing this up for your next
kernel weekly meeting.

-- 
Kind regards,
Luca Boccassi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20240603/f20d98fe/attachment.sig>