From 92dcbbabbb261ed0c8a0baa440da70cfae8eda41 Mon Sep 17 00:00:00 2001 From: kvaps Date: Thu, 22 Nov 2018 11:25:59 +0100 Subject: [PATCH] development: Disallow spoofing options override for VNETs (#1906) --- share/etc/oned.conf | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/share/etc/oned.conf b/share/etc/oned.conf index 84fb1e6eb7..ce7b07099a 100644 --- a/share/etc/oned.conf +++ b/share/etc/oned.conf @@ -1077,11 +1077,15 @@ VNET_RESTRICTED_ATTR = "CONF" VNET_RESTRICTED_ATTR = "BRIDGE_CONF" VNET_RESTRICTED_ATTR = "OVS_BRIDGE_CONF" VNET_RESTRICTED_ATTR = "IP_LINK_CONF" +VNET_RESTRICTED_ATTR = "FILTER_IP_SPOOFING" +VNET_RESTRICTED_ATTR = "FILTER_MAC_SPOOFING" VNET_RESTRICTED_ATTR = "AR/VN_MAD" VNET_RESTRICTED_ATTR = "AR/PHYDEV" VNET_RESTRICTED_ATTR = "AR/VLAN_ID" VNET_RESTRICTED_ATTR = "AR/BRIDGE" +VNET_RESTRICTED_ATTR = "AR/FILTER_IP_SPOOFING" +VNET_RESTRICTED_ATTR = "AR/FILTER_MAC_SPOOFING" VNET_RESTRICTED_ATTR = "CLUSTER_IDS"