From 172258291cea7100e89002203f3d9ae1bc468cd3 Mon Sep 17 00:00:00 2001 From: Vojtech Polasek Date: Wed, 21 Sep 2022 17:22:29 +0200 Subject: [PATCH] add warning to sysctl_net_ipv4_conf_all_forwarding --- .../sysctl_net_ipv4_conf_all_forwarding/rule.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_forwarding/rule.yml b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_forwarding/rule.yml index 7b0066f7c29..20a778cdf9e 100644 --- a/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_forwarding/rule.yml +++ b/linux_os/guide/system/network/network-kernel/network_host_and_router_parameters/sysctl_net_ipv4_conf_all_forwarding/rule.yml @@ -36,6 +36,15 @@ srg_requirement: '{{{ full_name }}} must not perform packet forwarding unless th platform: machine + +warnings: + - general: |- + There might be cases when certain applications can systematically override this option. + One such case is {{{ weblink("https://libvirt.org/", "Libvirt") }}}; a toolkit for managing of virtualization platforms. + By default, Libvirt requires IP forwarding to be enabled to facilitate + network communication between the virtualization host and guest + machines. It enables IP forwarding after every reboot. + template: name: sysctl vars: