Re: [RFC][PATCH] net: Allow xt_owner in any user namespace

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: "Eric W. Biederman" <ebiederm@xxxxxxxxxxxx>, Marian Marinov <mm@xxxxxx>
Subject: Re: [RFC][PATCH] net: Allow xt_owner in any user namespace
From: Alin Dobre <alin.dobre@xxxxxxxxxxxxxxxx>
Date: Mon, 09 Jun 2014 22:00:29 +0100
Cc: containers@xxxxxxxxxxxxxxxxxxxxxxxxxx, netfilter@xxxxxxxxxxxxxxx, Jan Engelhardt <jengelh@xxxxxxxxxx>
Delivered-to: containers@xxxxxxxxxxxxxxxxxxxxxxxx
In-reply-to: <87vbsus3wb.fsf_-_@x220.int.ebiederm.org>
Organization: Elastichosts Ltd.
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0

Unfortunately, applying this patch now makes iptables return EINVAL both
on host and container.

Cheers,
Alin.
_______________________________________________
Containers mailing list
Containers@xxxxxxxxxxxxxxxxxxxxxxxxxx
https://lists.linuxfoundation.org/mailman/listinfo/containers

References:
- Netfilter owner matching inside user namespace
  - From: Alin Dobre
- Re: Netfilter owner matching inside user namespace
  - From: Eric W. Biederman
- Re: Netfilter owner matching inside user namespace
  - From: Marian Marinov
- [RFC][PATCH] net: Allow xt_owner in any user namespace
  - From: Eric W. Biederman

Prev by Date: Re: [RFC] Per-user namespace process accounting
Next by Date: Re: Protection against container fork bombs [WAS: Re: memcg with kmem limit doesn't recover after disk i/o causes limit to be hit]
Previous by thread: Re: [RFC][PATCH] net: Allow xt_owner in any user namespace
Next by thread: Containers over 9p in 3.14
Index(es):
- Date
- Thread

[Index of Archives] [Cgroups] [Netdev] [Linux Wireless] [Kernel Newbies] [Security] [Linux for Hams] [Netfilter] [Bugtraq] [Yosemite Forum] [MIPS Linux] [ARM Linux] [Linux RAID] [Linux Admin] [Samba]

Powered by Linux