The last bits to prevent babeld from running unprivileged was its
kernel_setup_interface routine, that wants to set per interface
rp_filter. This behaviour has been disabled in a patch that has been
submitted upstream at https://github.com/jech/babeld/pull/68 and reuses
the skip-kernel-setup config option.
→ Overall exposure level for babeld.service: 1.7 OK 🙂
In the previous version multiple default values would generate an
invalid babeld config file since all options would be concatenated
without any separator.
Martin Weinelt
Scriptkiddi
Dominik Xaver Hörl
volth
Andreas Rammhold
Markus Mueller