4 ms·
How are you going to white-list network-interface names? On Linux at least you can name them almost anything you want: % sudo ip link set eth3 down % sudo
by okdana 8y ago
How are you going to white-list network-interface names? On Linux at least you can name them almost anything you want:
% sudo ip link set eth3 down
% sudo ip link set eth3 name "'deal-with-it'"
% sudo ip link show "'deal-with-it'"
5: 'deal-with-it': <BROADCAST,MULTICAST> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 10000
link/ether xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff
The only interface-name restrictions iproute2 sets is that they can't contain NUL, slash, or white space, and they can't be longer than 15 characters.
- tedunangst 8y agoSo I guess the question is does a regex of [^/ ]{1,15} count as a whitelist or a blacklist?
- amluto 8y agoSo does Linux allow .. as an interface name? If so, that’s nuts.